Specifying an action to take when a quarantine threshold is met

Article:HOWTO82491  |  Created: 2012-11-30  |  Updated: 2014-06-25  |  Article URL http://www.symantec.com/docs/HOWTO82491
Article Type
How To


Subject


Specifying an action to take when a quarantine threshold is met

You can define thresholds for the local quarantine and specify the actions that you want Mail Security to take when a quarantine threshold is met.

See Establishing local quarantine thresholds

You can specify any of the following actions:

Notify Administrator

Sends a notification message to the administrator when a threshold is met.

This item is checked by default.

Notify others

Sends a notification to the other recipients that you specify when a threshold is met.

Delete oldest items

Removes the oldest items in the local quarantine when a threshold is met.

To specify an action to take when a quarantine threshold is met

  1. In the console on the primary navigation bar, click Monitors

  2. In the sidebar under Views, click Quarantine Settings

  3. Under When a threshold is met, check Notify Administrator to send notification messages to the administrator.

    See Configuring notification settings for scan violations

  4. Check Notify others to send notification messages to additional people.

  5. In the Notify others box, type the email addresses of the people to whom you want Mail Security to send notifications.

    Separate email addresses with commas.

  6. Check Delete oldest items to remove the items that reach a threshold.

    This option is not enabled by default.

    If Delete oldest items is not checked and a quarantine size threshold is reached, the event is logged. Mail Security sends a notification to the recipients that are specified on the Quarantine Settings page.

  7. Under Administrator Notification, in the Subject Line box, type your subject line text.

    The default text is: Administrator Alert: The Symantec Mail Security Quarantine has exceeded a set limit.

  8. In the Message Body box, type the administrator notification message body.

    The default text is: You should manage the Quarantine to remove files or change the Quarantine settings. Details: %details%.

    You can use variables in the message body.

    See Alert and notification variables

  9. On the toolbar, click Deploy changes to apply your changes.

    See Deploying settings and changes to a server or group


Legacy ID



v63058789_v82634657


Article URL http://www.symantec.com/docs/HOWTO82491


Terms of use for this information are found in Legal Notices