Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/21.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=email-SMTP-quarantine

SMTP quarantine

With SMTP quarantine, you can filter quarantined emails. You can delete or release emails from the quarantine area.

Basic filter

Specify filters.

  • Start and end dates: Specify the time during which emails were processed.
  • Sender/Recipient/Subject: Specify the keywords.

Filter by

Specify filters.

  • Blocked by RBL
  • Spam
  • Analyzed by Zero-day protection
  • Infected
  • Unscannable content or protected attachment
  • DKIM verification
  • Other
  • Blocked source IP
  • Blocked destination IP
  • Unscannable content or protected attachment
  • Oversized message
  • Blocked header
  • Blocked by RBL
  • Blocked by data protection
  • Spam
  • Infected
  • Other

SMTP quarantine data

You can do as follows:

  • Click Delete to delete filtered emails from the quarantine area.
  • Click Release to release filtered emails to your inbox.
  • Click Release and report for false positives marked as Spam or Probable spam. These are reported to SophosLabs.

Note

You can't release virus-infected emails and emails found malicious by Zero-day protection.

Note

To delete emails quarantined due to Zero-day protection analysis, you need read-write permission for Zero-day protection activity.

Total utilization: Percentage of the utilized quarantine area. When the quarantine repository is full, older emails are purged.

More resources