Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Where to set recipient E-Mail address for Quarantine Report

Hi,

 

we sometimes get Mails of our employees quarantined so I would like to receive the daily Quarantine Report.

Under Email Protection -> Quarantine Report the status is Enabled.

Under the Exceptions Tab there are no "Skip Address Patterns" defined.

Thus with the above settings I would expect a report to be sent to all the users.

However, this does not happen currently.

 

Why is this the case and how can I change it?

 

Thank you for your help!



This thread was automatically locked due to age.
Parents
  • Hi Julius,

    Refer to #6 in Rulz (last updated 2019-04-17).  The User object must have the email address(es) for which the user is to receive a quarantine report.

    Cheers - Bob

  • Hi Bob,

     

    even without setting the mail address now in the user section I managed to receive a Quarantine report by sending myself a mail from an external address with a DOC attachment (which we have marked as a blocked file extension). I guess that my assumption of the Quarantine Report was wrong.

    I always thought of it being a general report that an Admin can receive instead of the user just being informed that an E-Mail to him has been qurantined.

    So the report works fine for each individual user and is very helpful.

    Is there an option in addition to the above, to also receive a summary quarantine report as an Administrator daily or perhaps just triggered in case there are any quarantined E-Mails?

     

    Thanks!

  • Have you taken a look at the Mail Manager, Julius?

    Cheers - Bob

  • Hi Bob,

     

    thank you for the hint with the Mail Manager.

    Yes I know it and look at it regularly when I get a note from a user that his mail cannot be sent out due to SPAM suspicion.

    But is there a report that can be generated from that to be sent to the Admin or do I have to check it myself every day?

  • This could be done automatically, but it would require a lot of effort with PostgreSQL programming, a cron job and knowledge of sendmail.

    You could give the Admin WebAdmin access as a 'Mail Manager' on the 'Access Control' tab.  That only allows access to Mail Manager, so the Admin could see the quarantine at any time without being able to make changes to your WebAdmin configuration.  You can create a test user and experiment with limited access.

    Cheers - Bob  

Reply
  • This could be done automatically, but it would require a lot of effort with PostgreSQL programming, a cron job and knowledge of sendmail.

    You could give the Admin WebAdmin access as a 'Mail Manager' on the 'Access Control' tab.  That only allows access to Mail Manager, so the Admin could see the quarantine at any time without being able to make changes to your WebAdmin configuration.  You can create a test user and experiment with limited access.

    Cheers - Bob  

Children