Quarantine Reports

The Quarantine Reports feature allows administrators to schedule, customize, and manage summary reports that are sent to administrators and/or users via email. These reports provide an overview of emails quarantined in MetaDefenderCloud Email Security.

Report List

Admins can view and manage existing reports from the Reports section under Settings.

  • Search bar: Allows users to filter reports by report name or subject

  • Report columns:

    • Report name: The internal name assigned to the report.
    • Subject: The subject line used in the sent email.
    • Status: Toggle to activate or deactivate scheduled sending.
  • Report buttons:

    • Delete: Delete icon to permanently remove the report.
    • Clone: Clone the report.

Creating a New Report

Click Add new report in the top-right corner.

Choose Report Type

Select report type from the drop down list:

  • Administrator Quarantine Report – Similar to User Quarantine Reports but includes all quarantined emails for all users:

    • Direct link to the Quarantine portal
    • Summary count
  • User Quarantine Report – Notifies end users about emails quarantined for them

    • Email details: Sender, subject, date, verdict
    • Optional action links for:
      • Delivering email
      • Requesting rescan

For other report types, see Scan Reports.

Report Settings

Each report includes the following configuration options:

  • Active – Enables or disables the report.
  • Report name – Internal descriptive name.
  • Report subject – Subject line of the email.
  • Email sender – From address for outgoing reports.
  • Select days of the week – Choose which days the report is sent.
  • Use custom start date - Choose a custom start date for the first report. If not selected, emails quarantined from the report creation date will be included in the first report.
  • Time / Time zone – Schedule delivery time.
  • Recipients – Select users or groups to receive the report.
  • Allowed actions – Allow users to Deliver, Rescan emails and/or View scan results.
  • Verdicts filter – Restrict report to specific verdicts (e.g. Malicious, Suspicious, Encrypted content).

Editing a Report

Clicking on a report opens the Report Details page, where you can configure general settings and the email content.

Report Settings

  • Report Name: Internal display name for the report.

  • Report subject: Subject line used in the report email.

  • Email Sender: Specifies the sender email address, for example: noreply@mycompany.com.

    • The sender field can also include both display name and email address as follows: "Display name" <noreply@mycompany.com>.
  • Schedule: Choose the days of the week and time for delivery.

  • Time zone: Define the time zone for scheduled delivery.

  • Recipients: Users or groups to receive the report.

Email Content Customization

  • HTML Tab:

    • Provides a rich text editor for formatting email content.
    • Users can insert fields, format text, add tables, and customize the layout.
  • Plain Text Tab:

    • Used for text-based email clients.

When editing HTML content, the plain text version is automatically updated, based on the content provided.

Email Content Preview

  • Shows a sample report email with placeholders replaced by actual data.

Scripting Language

It is also possible to additionally customize report templates using the Handlebars template scripting language. For more information see: https://handlebarsjs.com/guide/

Custom Fields

The following field can be inserted into email report templates:

Administrator Quarantine Report

NameDescription
Number of EmailsTotal number of emails quarantined.
Action URLLink to MetaDefender Cloud Email Security Quarantine.

User Quarantine Report

NameDescription
Number of EmailsTotal number of emails quarantined for the specific user.
Emails (Array)Array of quarantined email details.
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard