About the plain text formatted quarantine report

Plain text quarantine reports:

• notify email users about email messages that have been quarantined to their per-recipient quarantine
• explain how to delete one or all quarantined email messages
• explain how to release individual email messages

For plain text quarantine reports, you can only release email from the per-recipient quarantine by using the email release method. For more information on how to release email from the per-recipient quarantine, see “Releasing and deleting email via quarantine reports” on page 609.

Figure 264:Sample plain text quarantine report

Table 58:Sample plain text quarantine report

	Report content
Message header of quarantine report	Subject: Quarantine Summary: [ 3 message(s) quarantined from Thu, 04 Sep 2008 11:00:00 to Thu, 04 Sep 2008 12:00:00 ] From: release-ctrl@example.com Date: Thu, 04 Sep 2008 12:00:00 To: user1@example.com
Quarantined email #1	Date:       Thu, 04 Sep 2008 11:52:51 Subject:    [SPAM]  information leak From:       User 1 <user1@example.com> Message-Id: MTIyMDU0MzU3MS43NDJfNTk5ODcuRm9ydGlNYWlsLTQwMCwjRiNTIzYzMy NFLFU4OjIsUw==
Quarantined email #2	Date:       Thu, 04 Sep 2008 11:51:10 Subject:    [SPAM]  curious? From:       User 1 <user1@example.com> Message-Id: MTIyMDU0MzQ3MC43NDFfOTA0MjcxLkZvcnRpTWFpbC00MDAsI0YjUyM2Mj UjRSxVNzoyLA==

Table 58:Sample plain text quarantine report

Quarantined email #3

Date:       Thu, 04 Sep 2008 11:48:50 Subject:    [SPAM]  Buy now!!!! lowest prices From:       User 1 <user1@example.com> Message-Id: MTIyMDU0MzMzMC43NDBfNjkwMTUwLkZvcnRpTWFpbC00MDAsI0YjUyM2ND IjRSxVNToyLA==

Instructions for deleting or releasing quarantined email

Actions: o) Release a message:     Send an email to <release-ctrl@example.com> with subject line set to “user1@example.com:Message-Id”. o) Delete a message:     Send an email to <delete-ctrl@example.com> with subject line set to “user1@example.com:Message-Id”. o) Delete all messages: Send an email to <delete-ctrl@example.com> with subject line set to “delete_all:user1@example.com:e4d46814:ac146004:05737c7c11 1d68d0111d68d0111d68d0”.

About the HTML formatted quarantine report

HTML quarantine reports:

• notify email users about email messages that have been quarantined to their per-recipient quarantine
• contain links to delete one or all quarantined email messages (see Figure 265 on page 608)
• contain links to release individual email messages (see Figure 265 on page 608)

From an HTML format quarantine report, you can release or delete messages by using either web or email release methods. For more information on how to release email from the per-recipient quarantine, see “Releasing and deleting email via quarantine reports” on page 609.

Web release and delete links in an HTML formatted quarantine report may link to either the management IP address, local domain name, or an alternative host name for the FortiMail unit. For more information, see “Web release host name/IP” on page 604.

Figure 265:Sample HTML quarantine report

Table 59:Sample HTML quarantine report

	Report content
Message header of quarantine report	Subject: Quarantine Summary: [ 3 message(s) quarantined from Thu, 04 Sep 2008 11:00:00 to Thu, 04 Sep 2008 12:00:00 ] From: release-ctrl@example.com Date: Thu, 04 Sep 2008 12:00:00 To: user1@example.com
Quarantined email #1	Date: Thu, 04 Sep 2008 11:52:51 From: User 1 <user1@example.com> Subject: [SPAM] information leak Web Actions: Release Delete Email Actions: Release Delete
Quarantined email #2	Date: Thu, 04 Sep 2008 11:51:10 From: User 1 <user1@example.com> Subject: [SPAM] curious? Web Actions: Release Delete Email Actions: Release Delete

Table 59:Sample HTML quarantine report

Quarantined email #3

Date: Thu, 04 Sep 2008 11:48:50 From: User 1 <user1@example.com> Subject: [SPAM] Buy now!!!! lowest prices Web Actions: Release Delete Email Actions: Release Delete

Instructions for deleting or releasing quarantined email

Web Actions: Click on Release link to send a http(s) request to have the message sent to your inbox. Click on Delete link to send a http(s) request to delete the message from your quarantine. Click Here to send a http(s) request to Delete all messages from your quarantine. Email Actions: Click on Release link to send an email to have the message sent to your inbox. Click on Delete link to send an email to delete the message from your quarantine. Click here to send an email to Delete all messages from your quarantine. Other: To view your entire quarantine inbox or manage your preferences, Click Here

Releasing and deleting email via quarantine reports

Quarantine reports enable recipients to remotely monitor and delete or release email messages in the per-recipient quarantine folders.

Depending on whether the quarantine report is sent and viewed in plain text or HTML format, a quarantine report recipient may use either or both web release and email release methods to release or delete email from a per-recipient quarantine.

• Web release: To release or delete an email from the per-recipient quarantine, the recipient must click the Release or Delete web action link which sends an HTTP or HTTPS request to the FortiMail unit. Available for HTML format quarantine reports only.

Figure 266:Releasing an email from the per-recipient quarantine using web release

• Email release: To release or delete an email from the per-recipient quarantine, the recipient must either:
• Click the Release or Delete email action link which creates a new email message containing all required information, then send it to the quarantine control account of the FortiMail unit. Available for HTML format quarantine reports only.
• Manually send an email message to the quarantine control account of the FortiMail unit. The To: address must be the quarantine control email address, such as release-ctrl@example.com or delete-ctrl@example.com. The subject line must contain both the recipient email address and Message-Id: of the quarantined email, separated by a colon (:), such as:

user1@example.com:MTIyMDU0MDk1Ni43NDRfMTk2ODU0LkZvcnRpTWFpbC00MDAs I0YjUyM2NjUjRQ==

Figure 267:Releasing an email from the per-recipient quarantine using email release

Quarantine control email addresses are configurable. For information, see “Configuring the quarantine control accounts” on page 612.

Web release links may be configured to expire after a period of time, and may or may not require the recipient to log in to the FortiMail unit. For more information, see “Configuring global quarantine report settings” on page 602.

For more information on the differences between plain text and HTML format quarantine reports, see “About the plain text formatted quarantine report” on page 605 and “About the HTML formatted quarantine report” on page 607.

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!