Working with Quarantined emails
Within GFI MailEssentials there are a number of actions you can take on quarantined emails.
The Quarantine Store is accessible from the GFI MailEssentials interface and the administrator can manage quarantined emails.
To access the GFI MailEssentials Quarantine Store, go to GFI MailEssentials > Quarantine.
Viewing quarantined emails
Searching within the Quarantine or using default or customized search folders yields a list of quarantined emails.
NOTE
The results page may be split in two tabs:
- Malware and Content - Emails blocked by anti-malware engines and content filtering rules.
- Spam - Emails blocked by anti-spam filters.
- Choose Malware and Content tab or Spam tab to view quarantined emails for the specific quarantined email type. The results page provides the following functions and details:
Option | Description |
---|---|
Back | Returns you to the previous screen. |
Approve | Enables you to approve a single or multiple emails. For more information refer to Approving Quarantined Emails . |
Delete | Deletes a single or multiple emails. For more information refer to Permanently Delete Quarantined Emails . |
Rescan | Rescans emails using current antivirus signatures (which may be more up to date than the antivirus signatures that quarantined the email in the first place). Select one or more emails and click Rescan to rescan. |
Module | The module that identified the email as to be quarantined. |
Reason | The reason/rule that triggered the action to quarantine the email. |
Sender | The email address of the sender |
Recipients | The email address of the recipient |
Subject | The email subject as sent by the sender. |
Date | The date when email was quarantined |
Source | The location from where the email was quarantined |
Item Source |
Enables selecting a source to filter the display with. Available options are: |
Page size | Enables customizing how many emails per page are currently displayed. Choose a number to view a maximum number of items per page. |
- Click a row to access the individual email details.
From the Quarantined Items details page, review the email details and perform the following actions
Action | Description |
---|---|
Approve | Approve email. For more information refer to Approving Quarantined Emails . |
Sanitize and Approve | Sanitize email and approve. For more information refer to Approving Quarantined Emails . |
Rescan | Rescans emails using current antivirus signatures (which may be more up to date than the antivirus signatures that quarantined the email in the first place). |
Delete | Deletes email. For more information refer to Permanently Delete Quarantined Emails . |
Delete and Notify | Deletes email and notifies user. For more information refer to Permanently Delete Quarantined Emails . |
Download Item |
Downloads quarantined email to a location you choose in .eml format. Warning: Emails in Quarantine Store may contain malicious content. Use this feature with caution. |
Approving Quarantined Emails
There might be instances where you might want to approve an email blocked by GFI MailEssentials. GFI MailEssentials allows the administrator to approve a quarantined email so that it is released from the Quarantine Store and delivered to its intended recipients.
To approve emails:
- Use the search features described in the previous sections to return a list of quarantined emails.
- Select the checkbox next to the quarantined email(s) to approve and click Approve.
Sanitize and Approve Emails
GFI MailEssentials also enables you to remove the item that caused the email to be quarantined and send the email to recipient.
To sanitize and approve emails:
- Use the search features described in the previous sections to return a list of quarantined emails.
- Click on an email to view its details.
- Click Sanitize and Approve.
NOTE
Emails quarantined by the Information Store (VSAPI) source cannot be sanitized.
Permanently Delete Quarantined Emails
- Use the search features described in the previous sections to return a list of quarantined emails
- Select the checkbox next to the quarantined email(s) and click Delete.
Delete Quarantined Emails and notify user
The Delete and Notify feature enables notifying recipients when deleting emails from quarantine.
To delete and notify recipients:
- Use the search features described in the previous sections to return a list of quarantined emails.
- Click on an email to view its details.
- Click Delete and Notify.