mailsetting quarantine-rescan-option
Use this command to configure re-scanning when email is released from a quarantine.
Before email is released from a quarantine, FortiMail can re-scan it. This can be useful after configuration or antivirus package updates, or if the email was quarantined by another scan and has not yet received later scans. See also the sequential order of antispam scans on FortiMail.
Syntax
config mailsetting quarantine-rescan-options
set type {antivirus fortisandbox}
set source {personal-quarantine system-quarantine}
end
| type {antivirus fortisandbox} |
Select which scans to use when re-scanning:
-
Antivirus
-
FortiSandbox
-
Antispam
-
Content
-
Data leak prevention
|
|
| source {personal-quarantine system-quarantine} |
Select whether to rescan mail from either the personal quarantine and/or the system (and, if enabled, domain) quarantine.
|
For the system quarantine's Virus folder, email will not be rescanned when released. Otherwise, since the virus still exists, you would never be able to release the email, which would prevent administrators from submitting samples to FortiGuard labs or your internal SecOps teams.
For other quarantine folders, email will be rescanned when released for the first time. If an email is quarantined again, and you still want to release it, later rescans are skipped.
|
|
|
Related topics
antispam quarantine-report
mailsetting systemquarantine
