cancel
Showing results for 
Search instead for 
Did you mean: 

Quarantined messages get released

Jump to solution

Hello,

I'm facing this problem:

I configured a rule on Envelope Analysis to Quarantine a message for X days and after this period, the message gets released.

Is there any configuration on queues or quarantines that i must do for this not to happen?

Thanks,

1 Solution

Accepted Solutions
Highlighted
ijahnke
Level 11
Report Inappropriate Content
Message 5 of 8

Re: Quarantined messages get released

Jump to solution

Frequency Schedule = how often the ironmail checks the age of messages

Cleanup Interval = The amount of time messages can stay stored on the box before they are deleted

For a quarantine rule,  the action value is the number of days until the message is released.  If you select 0 then it will be checked in the Frequency Schedule  and if the recieved date is older than the time specified in the Cleanup Interval it will be deleted. If you set the frequency schedule to 168 hours (1 week) then a message that gets quarantined will exist for  at  LEAST 168 hours (1 week) before it is removed on the next cycle.

Just to clarify on this statement:

"This would help me partially, because the clean up task won't look at the date of the message, it will run on a specific scheduled time. So, if a the task storing up a week of quarantine messages, and the task ran a week ago, it means today it will run again and the messages i received today will be lost, then."

If you set up your frequency schedule to only run once a week, then every week it will check each message to determine if it is at least a week old. If it is not at least a week old then it will not be removed otherwise it will be deleted. Another example is a message that is 6 days old will not be removed on the next weekly cleanup. On the second consecutive cleanup the message will then be removed and it will have been 13 days since the message arrived.

7 Replies

Re: Quarantined messages get released

Jump to solution

i ran into the same issue. if you don't want it released from quarantine you must enter "0" (zero). Below is the from the Help file that helped me.

A number (from 1 to 15) must also be entered to specify the number of days the message will remain in quarantine before it is returned to normal mail flow. A value of zero (0) means “Do not deliver.” Any message quarantined with a value of 0 will be deleted according to the Cleanup Schedule for quarantine data. For more information about the Cleanup Schedule.

Re: Quarantined messages get released

Jump to solution

Hi, painese,

Thanks for the reply.

I've checked this myself, too. But i want to set a specific number of days for the message to be in quarantine and, after that, drop it. This is because we have an internal policy that says we must have the messages in quarantine available in case we need to release them.

This would help me partially, because the clean up task won't look at the date of the message, it will run on a specific scheduled time. So, if a the task storing up a week of quarantine messages, and the task ran a week ago, it means today it will run again and the messages i received today will be lost, then.

Re: Quarantined messages get released

Jump to solution

You still need to set to rule to quarantine with an action value of 0.  How long it stays in quarntine before being deleted is set in the clean up schedule.  Go to Administration --> Cleanup Schedule.  Select File Type of Quarantine Data.  By default all quarantines follow the same cleanup schedule.  If you need to change the cleanup interval for just one quarantine, you can do so by selecting the Quarantine Type, then change the Cleanup Interval.  Always leave the Frequency Schedule at 24 hours.

If you need some specific messages to be kept for a defferent ammout of time than other messages, you should make a quarantine specifically for those messages.  Cleanup schedules can only be set per-quarantine, not per-message.

Highlighted
ijahnke
Level 11
Report Inappropriate Content
Message 5 of 8

Re: Quarantined messages get released

Jump to solution

Frequency Schedule = how often the ironmail checks the age of messages

Cleanup Interval = The amount of time messages can stay stored on the box before they are deleted

For a quarantine rule,  the action value is the number of days until the message is released.  If you select 0 then it will be checked in the Frequency Schedule  and if the recieved date is older than the time specified in the Cleanup Interval it will be deleted. If you set the frequency schedule to 168 hours (1 week) then a message that gets quarantined will exist for  at  LEAST 168 hours (1 week) before it is removed on the next cycle.

Just to clarify on this statement:

"This would help me partially, because the clean up task won't look at the date of the message, it will run on a specific scheduled time. So, if a the task storing up a week of quarantine messages, and the task ran a week ago, it means today it will run again and the messages i received today will be lost, then."

If you set up your frequency schedule to only run once a week, then every week it will check each message to determine if it is at least a week old. If it is not at least a week old then it will not be removed otherwise it will be deleted. Another example is a message that is 6 days old will not be removed on the next weekly cleanup. On the second consecutive cleanup the message will then be removed and it will have been 13 days since the message arrived.

Re: Quarantined messages get released

Jump to solution

So, if i'm willing to keep the messages for a week, then I must set the interval for 168h (1 week) and the frequency for 24h? The clean up schedule will, then, everyday, delete the messagens that are older than 7 days ago?

Is that correct?

Thanks

ijahnke
Level 11
Report Inappropriate Content
Message 7 of 8

Re: Quarantined messages get released

Jump to solution

correct

Re: Quarantined messages get released

Jump to solution

Thank you very much for your help.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community