Cisco Bug: CSCur12773 - VOF: dynamic timer is not dynamic
Nov 05, 2020
- Cisco IronPort Email Security Appliance Software
Known Affected Releases
Symptom: End-customers are receiving live, non-viral threat messages even though the ESA and VOF had caught, flagged, and quarantined. When the messages are originally received, they are identified and quarantined as configured. At the 53 minute mark, messages are released from quarantine, re-processed through, and delivered to end-user, regardless of the threat component of the message. Message arrive to end-user with threat component still valid, just email delayed. Conditions: VOF configured and active on inbound mail policy. Emails are being caught and tagged VOF (non-viral) threat positive, then sent to quarantine. After dynamic timer is hit - 53 minutes - message is released from quarantine for "expiration" and released directly to end-user, even if there is not an updated or associated IPAS rule in place.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases