Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

What’s new – June 1, 2023

We have released a new feature, Quarantine API in Sophos Email. Using this API, you can perform operations on messages in both Email Security Quarantine and Post Delivery Quarantine.
Watch the video attached at end of this post to familiarize yourself with the feature.

Applies to the following Sophos products
Sophos Email

Operations supported by the API

Using the API, you can perform following operations on the quarantine and its content:

  1. List the messages in the quarantine (optionally search for specific message)
  2. Fetch details of a message such as attachment list and URL list, or preview message
  3. Download one or more attachments of a message
  4. Strip one or more attachments from a message
  5. Reattach one or more attachments from a message
  6. Release a message from quarantine (optionally add the sender to allow list)
  7. Delete a message from quarantine (optionally add the sender to block list)

These operations can be performed on both the Email Security Quarantine and Post Delivery Quarantine.
Note: Allow/block listing and strip/reattach attachments operations are not supported for Post Delivery Quarantine.

API Documentation

Refer the following resources for the API documentation:
Quarantine API documentation: https://developer.sophos.com/docs/email-v1/1/overview
Email Security Quarantine API guide: https://developer.sophos.com/email-quarantine
Post Delivery Quarantine API guide: https://developer.sophos.com/email-post-delivery-quarantine
Sophos Central API documentation: https://developer.sophos.com/apis
Following screenshot is of the Quarantine API documentation.

Watch the demo video