Overview
Within GFI MailEssentials there are a number of actions you can take on quarantined emails.
The Quarantine Store is accessible from the GFI MailEssentials interface and the administrator can manage quarantined emails.
To access the GFI MailEssentials Quarantine Store, go to GFI MailEssentials > Quarantine.
Information
Viewing quarantined emails
Searching the Quarantine or using default or customized search folders yields a list of quarantined emails.
The results page may be split into two tabs:
- Malware and content - Emails blocked by anti-malware engines and content filtering rules.
- Spam - Emails blocked by anti-spam filters.
Select the Malware and Content tab or the Spam tab to view quarantined emails for the specific quarantined email type. The results page provides the following options:
| Option | Description |
|---|---|
| Back | Returns you to the previous screen. |
| Approve | Enables you to approve single or multiple emails. |
| Delete | Deletes a single or multiple emails. |
| Rescan | Rescans emails using current antivirus signatures (which may be more up to date than the antivirus signatures that quarantined the email in the first place). Select one or more emails and click Rescan to rescan. |
| Module | The module that identified the email as to be quarantined. |
| Reason | The reason/rule that triggered the action to quarantine the email. |
| Sender | The email address of the sender |
| Recipients | The email address of the recipient |
| Subject | The email subject as sent by the sender. |
| Date | The date when email was quarantined |
| Source | The location from where the email was quarantined |
| Item Source |
Enables selecting a source to filter the display with. Available options are:
|
| Page size | Enables customizing how many emails per page are currently displayed. Choose a number to view the maximum number of items per page. |
From the Quarantined Items details page, review the email details and perform the following actions.
| Action | Description |
|---|---|
| Approve | Approves email. |
| Sanitize and Approve | Sanitizes email and approves. |
| Rescan | Rescans emails using current antivirus signatures (which may be more up to date than the antivirus signatures that quarantined the email in the first place). |
| Delete | Deletes email. |
| Delete and Notify | Deletes the email and notifies the user. |
| Download Item |
Downloads quarantined email to a location you choose in .eml format. Warning: Emails in the Quarantine Store may contain malicious content. Use this feature with caution. |
The following is an example email in the quarantine:
Approving Quarantined Emails
There might be instances where you might want to approve an email blocked by GFI MailEssentials. GFI MailEssentials allows the administrator to approve a quarantined email so that it is released from the Quarantine Store and delivered to its intended recipients.
To approve emails:
- Use the search features described in the previous sections to return a list of quarantined emails.
- Select the checkbox next to the quarantined email(s) to approve and click Approve.
Sanitize and Approve Emails
GFI MailEssentials also enables you to remove the item that caused the email to be quarantined and send the email to the recipient.
To sanitize and approve emails:
- Use the search features described in the previous sections to return a list of quarantined emails.
- Click on an email to view its details.
- Click Sanitize and Approve.
NOTE: Emails quarantined by the Information Store (VSAPI) source cannot be sanitized.
Permanently Delete Quarantined Emails
- Use the search features described in the previous sections to return a list of quarantined emails.
- Select the checkbox next to the quarantined email(s) and click Delete.
Delete Quarantined Emails and Notify the User
The Delete and Notify feature enables notifying recipients when deleting emails from the quarantine.
To delete and notify recipients:
- Use the search features described in the previous sections to return a list of quarantined emails.
- Click on an email to view its details.
- Click Delete and Notify.