Advisory: Sophos Endpoint - "Your connection isn't private" We're aware of a certificate issue and are actively working to resolve. Please see: KB-000045954 for the latest updates.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mails quarantined multiple times in email Security and data protect

Hello all,

I am currently starting to use Sophos Central Mail. First tests with the end-user quarantine have shown that released mails sometimes end up in the quarantine again after being released by another policy.

Here is the process I am observing:

1. mail (with unscannable attachment) comes in and is scanned
2. email security module quarantines mail because attachment can't be scanned
3. user gets quarantine summary
4. user releases the mail

up to here everything as I expect it but then:

5. data protection module detects the released mail as unscannable and moves it back to quarantine

Maybe I missed the point or it is intentional but my wish is that a deliberately released mail cannot be quarantined by another scan.

Maybe someone can help me.

Many greetings
Stephan



Added tags
[edited by: Raphael Alganes at 11:13 AM (GMT -7) on 2 Jun 2023]
Parents Reply
  • Hi Vivek,

    Thank you for your quick response.

    the first action was due to unscannable content.

    With the second event I only see that it was the data control. But there is only an attachment filter included, so it could have been only the attachment.

    Hopefully this information will help.

    Regards

    Stephan

Children