This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is there a log entry created when an email is released from quarantine from the admin console?

We would like to keep track of when emails are released from quarantine by an administrator using the admin console.  Is there a way to track this?

Thanks!



This thread was automatically locked due to age.
Parents
  • Hi,

    PureMessage does not have any auditing functionality - it doesn't log admin related activity such as changing a policy or in this case releasing a message from quarantine. There's no way to accomplish this exactly, the security model is fairly simple - in effect there are 2 'levels':

    * Members of the 'Sophos PureMessage Administrators' group - can administer PureMessage using the MMC console

    * Message recipients - can open spam digest links to deliver/delete spam messages from Quarantine, or perform the same task by opening the Quarantine website directly if they are in AD

    So in summary, PureMessage's model is to only add users to the 'Sophos PureMessage Administrators' group which you want to change configuration and deliver messages - remembering that these options also include the ability to stop all scanning.

    Thanks,

    Reginald
Reply
  • Hi,

    PureMessage does not have any auditing functionality - it doesn't log admin related activity such as changing a policy or in this case releasing a message from quarantine. There's no way to accomplish this exactly, the security model is fairly simple - in effect there are 2 'levels':

    * Members of the 'Sophos PureMessage Administrators' group - can administer PureMessage using the MMC console

    * Message recipients - can open spam digest links to deliver/delete spam messages from Quarantine, or perform the same task by opening the Quarantine website directly if they are in AD

    So in summary, PureMessage's model is to only add users to the 'Sophos PureMessage Administrators' group which you want to change configuration and deliver messages - remembering that these options also include the ability to stop all scanning.

    Thanks,

    Reginald
Children
No Data