Cisco Bug: CSCum80216 - Option to keep message in OF quarantine regardless of lower threat level
Mar 02, 2018
- Cisco Email Security Appliance
Known Affected Releases
Symptom: With the current implementation of the Outbreak Filters in AsyncOS, the retention time being configurable in the Outbreak Filter (OF) settings is a "Maximum Quarantine Retention" time. Per design, the appliance re-scans quarantined messages and if new rule updates are available revising the threat level of a message so that it falls under the retention threshold, the message will automatically be released - regardless of the Outbreak quarantines retention time settings. If the threat level of a message is not changed due to new rules, messages are then released from the Outbreak quarantine once the retention period has elapsed. Conditions: Feature Request to provide an option within the Outbreak Filter Quarantine settings to keep messages quarantined until the maximum retention time is reached, regardless of any Outbreak Filter rule update which lowers the threat level and would cause an automatic release of the corresponding message.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases