SMTP quarantine
With SMTP quarantine, you can filter quarantined emails. You can delete or release emails from the quarantine area.
Basic filter
Specify filters.
- Start and end dates: Specify the time during which emails were processed.
- Sender/Recipient/Subject: Specify the keywords.
Filter by
Specify filters.
- Blocked by RBL
- Spam
- Analyzed by Zero-day protection
- Infected
- Unscannable content or protected attachment
- DKIM verification
- Other
- Blocked source IP
- Blocked destination IP
- Unscannable content or protected attachment
- Oversized message
- Blocked header
- Blocked by RBL
- Blocked by data protection
- Spam
- Infected
- Other
SMTP quarantine data
You can do as follows:
- Click Delete to delete filtered emails from the quarantine area.
- Click Release to release filtered emails to your inbox.
- Click Release and report for false positives marked as Spam or Probable spam. These are reported to SophosLabs.
Note
You can't release virus-infected emails and emails found malicious by Zero-day protection.
Note
To delete emails quarantined due to Zero-day protection analysis, you need read-write permission for Zero-day protection activity.
Total utilization: Percentage of the utilized quarantine area. When the quarantine repository is full, older emails are purged.
More resources