Guest

Preview Tool

Cisco Bug: CSCum80216 - Option to keep message in OF quarantine regardless of lower threat level

Last Modified

Mar 02, 2018

Products (1)

  • Cisco Email Security Appliance

Known Affected Releases

8.0.1-023

Description (partial)

Symptom:
With the current implementation of the Outbreak Filters in AsyncOS, the retention time being configurable in the Outbreak Filter (OF) settings is a "Maximum Quarantine Retention" time. Per design, the appliance re-scans quarantined messages and if new rule updates are available revising the threat level of a message so that it falls under the retention threshold, the message will automatically be released - regardless of the Outbreak quarantines retention time settings. If the threat level of a message is not changed due to new rules, messages are then released from the Outbreak quarantine once the retention period has elapsed.

Conditions:
Feature Request to provide an option within the Outbreak Filter Quarantine settings to keep messages quarantined until the maximum retention time is reached, regardless of any Outbreak Filter rule update which lowers the threat level and would cause an automatic release of the corresponding message.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.