Skip to main content

Quarantine Digest - Settings

Note

Note: If your policy has no verdicts set to quarantine, no emails will be quarantined and no quarantine digests will be sent.

Settings for enabling/disabling quarantine digests, adjusting their frequency, and selecting which types of email verdicts are shown can be customized:

  • Globally at MSP level (updating this will apply to new customers only)

  • Per customer

  • Per mailbox

image-20240728-094526.png

Quarantine Digest Frequency

image-20240728-094912.png

Quarantine digests can be configured to send hourly or once per day, and on any chosen day of the week.

Note

Note: Users will only receive a quarantine digest if they have new quarantined emails since the last digest. For instance, if the frequency is set to 4 digests per day but there are no new quarantined emails, no digests will be sent.

Email verdicts shown in quarantine digests

image-20240728-095344.png

You can control what email verdicts are shown in quarantine digests. Learn more about email verdicts.

Tip: It is recommended to show all verdict types in quarantine digests. Safeguards are already in place to prevent users from releasing potentially harmful emails.

Releasing email from quarantine

The email verdict determines who can release the email from quarantine.

image-20240728-102204.png

Email verdict

Who can release

Banned (Attachments by policy)

Partner / Admin Only

Impersonation

End-user

Infomail

End-user

Malware

Partner / Admin Only

Phishing

Partner / Admin Only

Policy Geo

Partner / Admin Only

Spam Definite

End-user

Spam High

End-user

Spam Likely

End-user

Release requests

When a user requests an email, you control where the release request email notifications are sent.

  • Partner - Sends to the address(es) defined at MSP level)

  • Administrators - Sends to every mailbox that has an administrator role at customer level.

Note

Note: When set to partner, these email addresses are set at MSP level, not at customer level.

image-20240728-101105.png

The most common setup for MSPs is to have release requests sent to the MSP’s service desk, automatically opening a ticket.

image-20240728-100915.png

Emails that have been requested for release, will have a “pending” status which is searchable in the Live Email Tracker.

image-20240728-103034.png

This view can also be accessed by clicking on “pending user request” from the MSP dashboard

image-20250401-103517.png

Quarantine Digests In-Depth

This section of the documentation outlines explains the functionality of quarantine digests, how to use deliver/preview/delete button, and how to generate a digest on demand.

Using the Preview Button

Previewing emails allows users to read their quarantined email within their browser window where all images have been removed and all links are converted to plaintext.

To preview emails from a quarantine digest, click the "Preview" button for the specific email in the quarantine digest. This will open the default browser.

Once opened in the browser, you can decide to either deliver the email or delete the email. The below articles explain the features further:

Deliver Options

Delete Options

874053635.png

Using the Deliver Button

To deliver emails directly from a quarantine digest perform the following.

Step 1:

Click the "Deliver" button for the specific email in the quarantine digest.

Step 2:

A browser window will open stating that the email has been delivered.

Step 3a:

If you wish to allow all future emails from the sender select "Always allow sender".

Step 3b:

If you wish to allow all future from the sender's domain select "Always allow sender domain".

Note

Note: You cannot allow entire free-mail domains such as Gmail or Hotmail.

Step 4:

Click "Confirm" if you have selected an option.

874217473.png

Deliver Options

Select the "Deliver" option to deliver the email from quarantine.

Note

Note: If the email has been quarantined for violating the domain’s policy, or has the malware/phishing verdict, it can only be delivered by an administrator for security reasons. In this case, clicking on the link sends a deliver request to the domain administrator.

874250253.png
Deliver & Always Allow Sender

Select the "Deliver & Always Allow Sender" option to deliver the email and to add an allow rule entry for the specified sender email address.

874283009.png
Deliver & Always Allow Sender Domain

Select the "Deliver & Always Allow Sender Domain" option to allow the sender domain. This adds an allow rule for the specified sender domain to that particular user’s list of rules.

Note

Note: You cannot allow entire free-mail domains such as Gmail or Hotmail.

874086405.png

Using the Delete Button

To delete emails directly from a quarantine digest, perform the following:

Step 1:

Click the "Delete" button in the quarantine digest.

Step 2:

A browser window will open stating that the email has been deleted.

Step 3a:

If you wish to block all future emails from the sender select "Always block sender".

Step 3b:

If you wish to block all future from the sender's domain select "Always block sender domain".

Step 4:

Click "Confirm" if you have selected an option.

874512402.png

Delete Options

Select the "Delete" option to delete the email from quarantine.

874414081.png
Delete & Always Block Sender

Select "Deliver & Always Block Sender" to block the sender email address. This adds a block rule entry for the specified sender email address and the user's email address.

874348552.png
Delete & Always Block Sender Domain

Select "Deliver & Always Block Sender Domain" to block the sender domain. This adds a block rule for the specified sender domain to that particular user’s list of rules. Email from other addresses at this domain are

also blocked.

874479617.png

Digest on Demand & Manage Your Quarantine

Manage Your Quarantine

The Manage Your Quarantine button allows users to login to view their quarantine, either with local Mesh credentials or SSO with Microsoft. When logged in, the user will see the Live Email Tracker with just emails delivered to their address/aliases and access to the policy page with any allow/block rules they have created.

image-20250401-111718.png

Digest on Demand

The Digest on Demand feature allows users to request a brand-new digest in between the configured period. This is will open the default browser.

If there is a email in quarantine, a success message will be displayed and new digest will be sent.

874479636.png

If there is no new email in quarantine, a warning message will be displayed and nothing will be sent.

image-20250401-111829.png

Quarantine Digests

Looking for a video guide for end-users?

Introduction

Mesh can be configured to send users and administrators regular email digests, that list their quarantined email. The frequency and what time these digests can be controlled by the partner or administrator.

Quarantine digests are sent on a frequency determined by your organization.

You will only receive a digest if there has been newly quarantined email since your last digest.

Note

Emails are kept in the quarantine for 28 days. After 28 days has passed, actions cannot be taken on the quarantined email. It cannot be delivered, previewed, or deleted.

image-20250401-104727.png

Your Email Traffic

The stats breakdown at the top of each email shows you email stats over the last 30 days. There are four separate categories.

image-20250401-105016.png

Threats

Number of quarantined emails that were given a Malware, Phishing, or Impersonation verdict.

Spam

Number of quarantined emails that were given a Spam-Likely, Spam-High, or Spam-Definite verdict.

Policy

Number of quarantined emails due to policies in place (banned attachments / Geo Filter).

Clean

Number of emails that were given a clean verdict.

Email Actions

Four options are presented to the user when an email they have received is quarantined.

image-20250401-105247.png

Deliver

Release the email from quarantine and deliver the email. The user is also given the option to allow future emails from the sender or domain.

image-20250401-105948.png

Preview

View the contents of the email within a web browser before carrying out any action.

Delete

Delete the email from the quarantine and create a block rule for the domain or sender if desired.

Request

Send a notification to the customer administrator or to partner defined addresses to request delivery of the email.

Note

For security reasons, allow rules do NOT bypass phishing, malware, banned, or geo filter verdicts. To bypass these verdicts, you need to create a custom rule.

image-20250401-105740.png
In this section: