End User Spam Quarantined/Deleted Report
-
Saturday, February 16, 2013 3:57 AMWe use Forefront Protection 2010 for Exchange and we have users requesting to view what FPE has deleted/quarantined for them so that they can make sure there are no false positives. From what I've read it looks like FPE doesn't include any way to notify end users of what FPE has deleted/quarantined for them. Does anyone have a suggestion on how to accomplish this if FPE doesn't have that feature? Any workarounds or ideas?
All Replies
-
Saturday, February 16, 2013 8:20 AM
Hi,
that's right that FPE doesn't have any option to give users access to their quarantine. You can use notifications for the recipient if an email has been blocked, but that would cause spamming of the user.
If you want to have a daily report you maybe could do it with powershell. With powershell you can access the quarantine filtered for each user. With this information you can build an email and send it to the user, but that would be some work to write the powershell script.
Greetings
Christian
Christian Groebner MVP Forefront
- Proposed As Answer by Nick Gu - MSFTMicrosoft Contingent Staff, Moderator Thursday, February 21, 2013 2:43 AM
- Marked As Answer by Nick Gu - MSFTMicrosoft Contingent Staff, Moderator Monday, February 25, 2013 1:42 AM
-
Saturday, February 16, 2013 1:35 PMThanks. Do any of the notification options send e-mails to users if an e-mail gets deleted/quarantined based on content filtering? It looked like it was all malware, viruses, filter lists,etc.
-
Saturday, February 16, 2013 2:07 PM
Hi,
there is no option for the content filter as there is no option for IP filter. The reason is just simple because whenever a user gets notified about a blocked message it would spam the users mailbox.
Greetings
Christian
Christian Groebner MVP Forefront
.png)
