This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Release and report as False Positive

I'm running the latest version of UTM (9.003-16) and while I was putting together a "User Guide" for my users concerning the End User Portal and Mail Quarantine, I came across a problem with the documentation that states the following options available with a quarantined email:

•View: Opens a window with the contents of the e-mail.
•Download: Selected messages will be downloaded in EML format.
•Delete: Selected messages will be deleted irrevocably.
•Whitelist sender: Moves the e-mail to your inbox and adds the sender to the whitelist. Successive e-mails of this sender will not be quarantined. Note, that mails containing malicious content will always be quarantined, even if the sender is on the whitelist.
•Release: Selected messages will be released from quarantine.

I DO NOT have "Whitelist sender" but I DO have "Release and report as false positive". Was this just a name change for the "Whitelist sender" option or is "release and report" something totally new that just hasn't made it into the docs yet?

This thread was automatically locked due to age.

0 BAlfson over 12 years ago

Are you looking at the Mail Manager instead of the User Portal?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 cottonakin over 12 years ago in reply to BAlfson

No, this is an option in the User Portal, Mail Quarantine Tab.

B.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ol Deda over 12 years ago

no changes there.
Cancel
Vote Up 0 Vote Down

Cancel
0 cottonakin over 12 years ago in reply to Ol Deda

no changes there.

I don't know what that means, did you mean "no changes here"?

B.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ol Deda over 12 years ago

sorry for my short response
no user portal has not changes

but for some emails you can't do white or blacklist
those with atachments .bat or .exe I think
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 12 years ago

The whitelist option only appears to the left of a quarantined email. If there are no quarantined emails, you don't get that dropdown box.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 cottonakin over 12 years ago in reply to BAlfson

My point is that "Release and Report as False Positive" does not appear in the documentation and I'm wondering what exactly it does.

Since I didn't have a "Whiltelist Sender" option, I thought that Sophos might have renamed that option.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ol Deda over 12 years ago

no a bug or browser bug can rename it
do a print screen because i'm a bit confused
Cancel
Vote Up 0 Vote Down

Cancel
0 cottonakin over 12 years ago in reply to Ol Deda

As Bob previously mentioned, I didn't have "Whitelist Sender" because I didn't have any emails. Here is the screenshot showing BOTH options, but, again, Release and Report... isn't in the documentation.
- Release.jpg
- View
- Hide
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 12 years ago

Yeah, I think that's definitely a "documentation bug" you've put your finger on! [;)]

In the SMTP Proxy log, when you see reason="as" extra="", you know that CommTouch is saying that the item looks like spam. "Release and report as false positive" sends the information to CommTouch, and after awhile (a day, an hour, a minute???), with similar reports, such emails no longer will be quarantined.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Release and report as False Positive

Submitted a Tech Support Case lately from the Support Portal?