Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Quarantined Email Report

I can't see anything in the Knowledge Base but is there a way to see what emails our users have released from Quarantine? Any built in report that shows an email was previously quarantined but since been released?



This thread was automatically locked due to age.
Parents
  •   
    Thank you for posting into the Community forum.
    Currently there is no report that directly shows which emails were quarantined then released by users. In all cases though only the recipient AND central admins can release quarantined emails.
    You can however see individual emails getting quarantined and released by clicking on the email subject within Message History, then go to > Message Details

    If it is a central admin that released the email though, it shows within the audit logs. It should be under the "Reports > General logs > Audit Logs"
    I would suggest exporting the logs first into a PDF format then searching for the term "Release quarantined messages"


Reply
  •   
    Thank you for posting into the Community forum.
    Currently there is no report that directly shows which emails were quarantined then released by users. In all cases though only the recipient AND central admins can release quarantined emails.
    You can however see individual emails getting quarantined and released by clicking on the email subject within Message History, then go to > Message Details

    If it is a central admin that released the email though, it shows within the audit logs. It should be under the "Reports > General logs > Audit Logs"
    I would suggest exporting the logs first into a PDF format then searching for the term "Release quarantined messages"


Children
No Data