Use Content Filter to Divert Emails to the Spam Quarantine in ESA

Introduction

This document describes the configuration to divert emails that are not marked spam to the Spam Quarantine.

Prerequisites

Requirements

Cisco recommends knowledge of these topics:

• Cisco Secure Email Gateway (SEG / ESA)
• Content Filters Knowledge
• Quarantines Knowledge
• Spam Quarantine Knowledge

Components Used

The information in this document is based on these software and hardware versions:

• Email Security Appliance

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

Background Information

The purpose for Spam Quarantine is to quarantine emails marked as spam, however, in relation to your organizations needs you can divert emails which are not classified as spam to the Spam Quarantine.

Caution: Ensure you understand End-User Quarantine Access.

Configure

Create the content filter on the ESA:

1. Navigate to Mail Policies > Incoming/Outgoing content filters
2. Click  Add Filter
3. Name the filter
4. Add condition desired and
5. Click Add Action
6. Choose Add/Edit Header
7. Use X-IronPort-Quarantine for the Header Name value box
8. Submit andCommit

As shown in the image:

Content Filter Action to Add Header

To finish, apply this filter to the desired Incoming/Outgoing Mail Policy.

Related information

• End user guides ESA