Overview
Email recipients at the organization can be authorized to manage their own quarantined emails. This way the quarantine operation load can be lowered on administrators.
Email Gateway Security supports multiple recipient quarantine configuration sets so that different recipients or groups can have different permissions on the quarantined emails.
When multiple recipient quarantine configurations apply to a certain recipient, the permissions will be the union of the permissions of the applicable configurations.
The following potentially sensitive information is disclosed to email recipients in the recipient quarantine that may reveal information about how and with what technologies emails are processed:
- Classifications: (for details see Email classifications)
- Malware scan verdict (if there is malware in the email or not)
Configuration
The following options need to be set
- Name: The distinctive and descriptive name of this recipient quarantine configuration.
- Recipient email address filter: a regular expression to match recipient email addresses to who this configuration will apply.
- Allowed recipient actions: actions that the recipients of this recipient quarantine configuration will be authorized to perform. Mutiple actions can be selected.
The Recipient email address filter needs to be specified with POSIX regular expression syntax.
Example
To match all recipients in example.com it is not sufficient to specify the filter as example.com , instead it needs to be specified as .+@example\.com .
Available actions
Currently the following actions are supported:
- Release request: authorize the recipient to mark emails for release from the Quarantine by Email Gateway Security administrators.
- Delete emails: authorize the recipient to delete emails from the Quarantine.
Service availabilitly
The Recipient Quarantine service can be enabled configuring the recipient_quarantine_port registry option. For details see Registry configuration.
User access
Recipients whose email address has a configuration to the Recipient Quarantine can log in to the service using One-Time Passwords (OTP) sent to their email addresses.
One-Time Password email layout
The One-Time Password email layout and language can be configured the way as described in Translation support.
The email template file name is otp.xsl .