Specifying an action to take when a quarantine threshold is met
|Article:HOWTO82491|||||Created: 2012-11-30|||||Updated: 2014-06-25|||||Article URL http://www.symantec.com/docs/HOWTO82491|
You can define thresholds for the local quarantine and specify the actions that you want Mail Security to take when a quarantine threshold is met.
You can specify any of the following actions:
To specify an action to take when a quarantine threshold is met
In the console on the primary navigation bar, click Monitors
In the sidebar under Views, click Quarantine Settings
Under When a threshold is met, check Notify Administrator to send notification messages to the administrator.
Check Notify others to send notification messages to additional people.
In the Notify others box, type the email addresses of the people to whom you want Mail Security to send notifications.
Separate email addresses with commas.
Check Delete oldest items to remove the items that reach a threshold.
This option is not enabled by default.
If Delete oldest items is not checked and a quarantine size threshold is reached, the event is logged. Mail Security sends a notification to the recipients that are specified on the Quarantine Settings page.
Under Administrator Notification, in the Subject Line box, type your subject line text.
The default text is: Administrator Alert: The Symantec Mail Security Quarantine has exceeded a set limit.
In the Message Body box, type the administrator notification message body.
The default text is: You should manage the Quarantine to remove files or change the Quarantine settings. Details: %details%.
You can use variables in the message body.
On the toolbar, click Deploy changes to apply your changes.
Article URL http://www.symantec.com/docs/HOWTO82491