About the quarantine

book

Article ID: 181266

calendar_today

Updated On:

Products

Mail Security for Microsoft Exchange

Issue/Introduction

 

Resolution

Mail Security provides the following options for quarantining messages:

Local quarantine

You can choose to send infected messages and attachments to the local quarantine when you configure Mail Security policies. You can also configure policies to quarantine the messages that trigger violations.

See Establishing local quarantine thresholds

See Viewing the contents of the local quarantine

See Deleting items from the local quarantine

Quarantine Server

You can forward the infected files that are in the local quarantine to the Symantec Quarantine Server, if it is set up on your network. Mail Security forwards infected files to the Quarantine Server at 60-minute intervals.

Files that are sent to the Quarantine Server are then forwarded to Symantec for analysis in real-time using HTTPS communications. Symantec automatically distributes updated definitions to the Quarantine Server when they are available.

The Quarantine Server is a component of Symantec AntiVirus Central Quarantine. Mail Security supports version 3.4 or later of the Symantec AntiVirus Central Quarantine Server. Version 3.4 is provided on the Mail Security CD in the following location and must be installed separately:

\ADMTOOLS\DIS

See the Symantec Central Quarantine Administrator's Guide for more information about the Symantec AntiVirus Central Quarantine, which is located on the product CD in the following location:

\DOCS\DIS\CentQuar.pdf

Note:

Files that contain non-viral threats, are unscannable, or violate content or file filtering rules are not forwarded to the Quarantine Server.