Reflexion will be End-of-life on March 31,2023. See Sophos Reflexion EoL FAQs to learn more.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

sophos_snd_quarantine folder in Outlook

Hi all !!

I have a situation where the Sophos email solution correctly allows the delivery of an email but in the outlook application it is received in a folder called sophos_snd_quarantine. Not finding that folder inside the outlook application.

Someone has presented a similar case for the identification and correction of it. Know what is causing this behavior.



This thread was automatically locked due to age.
  • Hello there,

    Thank you for contacting the Sophos Community.

    The sophos_snd_quarantine is the folder that Office/Outlook creates for Search and Destroy, when you enable this feature, this allows Central Email to scan emails that are in O365 user inboxes, in case there are new detections created POST delivery if the scanner finds the email has malicious components, it will put into the 'Logs & Reports >> Email Security >> Post Delivery Summary"  page, where you can either release the email or delete them.

    Only the  Central Email Admin user can release these emails, , they can be released by clicking on the Subject of the email, and clicking on the Release Button.

    The type of emails that end up in the snd are typically emails that contain now malicious URLs within the email itself. 


    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • Thank you very much for the prompt response, the information provided was very useful to me, so the response resolved this issue.

    I appreciate the attention.


Reply Children
No Data