FortiMail and FortiSandbox

[andyho]

Hi,

I am using FortiMail and FortiSandbox.

1. Some of the mails are moved to the system quarantine and it shows System Quarantine;Defer Disposition. What does this means? It stays in the system quarantine for days and i have to release them manually.   

2. For such mails, understand that they were moved to the system quarantine  because of matching rules. Please show me the steps to find out why they mails are being quarantined, and if it is a content filter rule, i would want to know which attachment in the email. 

Thank you so much. 

[Fullmoon]

its always helpful to review relevant history logs for the issue. (Monitor > Log > History)

In such case you wish to raise ticket to Fortinet TAC, be mindful to prepare these info. The KB below will guide you to export the cross search log from FortiMail.

http://kb.fortinet.com/kb...ateId=1%200%2050612877