Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 17 subscribers
  • Views 12477 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

sophos_snd_quarantine folder in Outlook

Angel_ITOS

Hi all !!

I have a situation where the Sophos email solution correctly allows the delivery of an email but in the outlook application it is received in a folder called sophos_snd_quarantine. Not finding that folder inside the outlook application.

Someone has presented a similar case for the identification and correction of it. Know what is causing this behavior.

Thanks

Angel



Edited tags
[edited by: Raphael Alganes at 6:01 AM (GMT -7) on 7 Jun 2023]
  • 0

    Hello there,

    Thank you for contacting the Sophos Community.

    The sophos_snd_quarantine is the folder that Office/Outlook creates for Search and Destroy, when you enable this feature, this allows Central Email to scan emails that are in O365 user inboxes, in case there are new detections created POST delivery if the scanner finds the email has malicious components, it will put into the 'Logs & Reports >> Email Security >> Post Delivery Summary"  page, where you can either release the email or delete them.

    Only the  Central Email Admin user can release these emails, , they can be released by clicking on the Subject of the email, and clicking on the Release Button.

    The type of emails that end up in the snd are typically emails that contain now malicious URLs within the email itself. 

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • 0 in reply to emmosophos

    Thank you very much for the prompt response, the information provided was very useful to me, so the response resolved this issue.

    I appreciate the attention.

    Regards,

Unfiltered HTML