How to Work with Messages in IronPort Anti-Spam

Spam Quarantine: Overview

The Spam Quarantine holds spam and suspected spam messages addressed to you. These messages were set aside during processing so that you could verify whether or not these messages are indeed spam. You can use this page to examine the messages and determine how to treat each one; however, your quarantined messages will be automatically deleted after a certain amount of time (set by the email administrator), so you do not need to take any action.

You can sort the message listing by clicking on the column headers (From, Subject, Date, Size). From the Spam Quarantine, you can perform the following tasks:

Reading Messages

To read a message in the quarantine, click the message's subject (in the "Subject" column). The message is shown in the Message Details page. From the Message Details page, you may release a message from the quarantine or delete it.

If the message you intend to read has already been deleted, the Message Not Found page is displayed. Messages are typically deleted from the quarantine automatically, so if you try to view a message from an old spam digest email, you may find that the message has already been deleted.

Releasing Messages

To release a message from the Spam Quarantine, click the checkbox next to the message (or messages) and then select Release from the drop-down menu. If you are viewing the message in the Message Details page, simply select Release from the drop-down menu. The message is then released from the quarantine and delivered to your inbox.

Deleting Messages

To delete a message, click the checkbox next to the message (or messages) and then select Delete from the drop-down menu. If you are viewing the message in the Message Details page, simply select Delete from the drop-down menu. Remember, messages in your quarantine will be automatically deleted after a certain amount of time (set by the email administrator).

Searching Messages

Using the search field, you can search your quarantined messages for a specific term in the message From: or Subject. Search results are displayed in the Search Results page.

Enter your search terms.

Entering a group of words separated by spaces will search for all of those terms as a single string in the order they were entered ("Term1 Term2 Term3"). A '-' before a term negates the search.

For example, if you enter:

Cisco spam quarantine

the system searches for the string "Cisco spam quarantine" in the From header and subject. The header must contain the string with the terms in the order in which they were entered. (The search is case-insensitive.) So this will match the subject "message is in Cisco spam quarantine." It will not match the subject "spam from Cisco should be quarantined" because the 3 terms do not appear in the correct order.

If you want to enter special characters, you have to escape them with a backslash. For example:

Cisco\'s spam quarantine

Messages matching your search criteria are displayed in the Search Results page. You can read, delete, and release messages on the Search Results page. To clear the search results, and return to your current list of quarantined messages, click Clear Search.

To perform more complicated searches, including specifying a date range, click Advanced Search.

Click the Advanced Search link to access the Advanced Search page. To search only for messages arriving today, simply click Search (the "Today" date range is selected by default).

  • Specify an envelope recipient, you can enter a partial address. Select whether the search results should match the exact recipient you entered, or whether the results should contain, start with, or end with your entry.
  • Please note that specifying a complete email address or specifying "Starts with" leads to faster search results.
  • Enter a date range to search through. Click the calendar icons to select a date.
  • Enter your search terms.
  • Click Search.
  • Messages matching your search criteria are displayed below the Search section of the page.

You can read, delete, and release messages on the Search Results page. To clear the search results, and return to your current list of quarantined messages, click Clear Search.