Monitoring the system : Managing the quarantines : Managing the system quarantine
Managing the system quarantine
The System Quarantine tab displays the system quarantine.
Unlike the per-recipient quarantine, the system quarantine cannot be accessed remotely by email users. Also, they do not receive quarantine reports for email held in the system quarantine and cannot manage the system quarantine themselves. A FortiMail administrator should periodically review the contents of the system quarantine. Alternatively, you can configure a special-purpose system quarantine administrator for this task. For more information, see “Configuring the system quarantine administrator account and disk quota”.
 
To reduce the amount of hard disk space consumed by the system quarantine, regularly release or delete items from the system quarantine.
By default, the system quarantine is not used until you configure the FortiMail unit to send per-recipient quarantine to system quarantine by selecting System quarantine in antivirus action profiles, content action profiles, and antispam action profiles. For more information, see “Configuring antivirus action profiles”, “Configuring antispam action profiles” and “Configuring content action profiles”.
To access this part of the web UI, your administrator account’s:
• Domain must be System
• access profile must have Read-Write permission to the Quarantine category
For details, see “About administrator account permissions and domains”.
To view and manage system quarantine folders
1. Go to Monitor > Quarantine > System Quarantine.
2. From the Folder dropdown list, select which type of quarantined email you want to view:
• Content -- these are the email messages caught by content profiles.
• Virus -- these are the email messages caught by antivirus profiles.
• Bulk -- these are the email messages caught by antispam profiles.
 
GUI item
Description
Delete (button)
Click to delete the selected item.
Compact
(button)
Select the check boxes of each email user whose quarantine folder you want to compact and click Compact.
For performance reasons, when you delete an email, it is marked for deletion but not actually removed from the hard disk at that time, and so still consumes some disk space. Compaction reclaims this hard disk space.
Note: FortiMail updates folder sizes once an hour. The reduction in folder size is not immediately reflected after compacting.
Mailbox
Lists the current mailbox, which is named Inbox. Older system quarantine mailboxes, also called rotated folders, are named according to their creation date and the rename date. For information on configuring rotation of the system quarantine mailbox, see “Configuring the system quarantine administrator account and disk quota”.
To view email messages quarantined in that mailbox, double-click its row. For more information, see “Managing the system quarantine”.
Size
Lists the size of the quarantine folder in kilobytes (KB).
Note: Mailbox sizes are updated once an hour.
Message Count
Lists the total number of quarantined messages in the mailbox.
 
 
You can also configure a system quarantine administrator account whose exclusive purpose is to manage the system quarantine. For more information, see “Configuring the system quarantine administrator account and disk quota”.
3. Double-click a system quarantine mailbox.
You can view, delete, release, and forward email in the system quarantine.
 
GUI item
Description
View (button)
To view a message, either double-click it, or mark its check box and click View.
Delete (button)
Click to delete the selected item.
Release
(button)
To release all email messages in the current view, mark the top check box and click Release.
To release individual email messages, mark their check boxes and click Release.
In the pop-up window, you can select to release email to the original recipient and/or to other recipients. If want to release email to other recipients, enter the email addresses. You can add up to five email addresses.
Back
(button)
Click to return to viewing the list of system quarantine folders.
Filter
User the filter to display the released or unreleased email only.
By default, FortiMail only displays the unreleased email.
Search
(button)
Click to search the system quarantine folder that you are currently viewing. For details, see “Searching email in the system quarantine”.
Subject
Lists the subject line of the email. Click to display the email message.
From
Lists the display name of the sender as it appears in the message header, such as "User 1".
To
Lists the display name of the recipient as it appears in the message header, such as "User 2".
Rcpt To
Lists the user name portion (also known as the local-part) of the recipient email address (RCPT TO:) as it appears in the message envelope, such as user2 where the full recipient email address is user2@example.com.
Received
Lists the time that the email was received.
Size
Lists the size of the email message in kilobytes (KB).
4. Double-click an email message to open it.
The email message appears, including basic message headers such as the subject and date.
5. Select the action that you want to perform on the quarantined email.
• To view additional message headers, click the + button, then click Detailed Header.
• To release the email message to its recipient, click Release.
• To download the email message from the quarantine, click Download.