Park suspicious mail safely, keep important mail safely
Not every suspicious mail is dangerous. Sometimes it is a real invoice. The quarantine in the Mail Security Gateway holds such mail until someone decides. The email archive keeps copies that you need to find again later.
Request a demoEmail quarantine with release
Suspicious mail does not land in the inbox but in quarantine. There, admins see a preview, the headers, the attachments and all scan results. Then they release or delete the mail. For a release they give a reason. They can handle many mails at once. Retention rules set how long entries stay.
An example: a supplier sends a new invoice with a macro. The gateway holds it. In quarantine your admin sees why. They also see what the sandbox found. If a suspicious link was checked, a screenshot of the target page is attached. So the admin has everything for the decision in one place.
Daily digest for your staff
Each recipient can get a summary once a day. It lists their mail that is new in quarantine. Next to each entry are two buttons: release or delete. The links are signed, valid for seven days and only work for that recipient. So the digest takes load off your IT team. A mail only shows up in one digest, not every day again. You switch the digest on or off per tenant.
Check and disarm attachments
Link to the malware sandbox
Some attachments only show what they do when opened. The gateway sends these files to themalware sandbox. There they run in an isolated virtual machine. First, a quick pre-check looks for active content. That means macros, scripts or JavaScript in a PDF, for example. A plain PDF invoice does not need the sandbox. If the gateway cannot read a file, it sends it there to be safe.
The result shows up in the quarantine view, with screenshots where available. An AI sums up notable reports in a short assessment. The sandbox checks the same file only once within 24 hours.
Disarm clean attachments (CDR)
Content disarm and reconstruction (CDR) rebuilds attachments without their active parts. This works for Office files, PDFs and archives. Your staff get the document, but without macros and embedded content. CDR only runs on files the scan has rated clean. Malware is blocked. The gateway logs every change. So you can see which attachment was changed and what was removed. You can switch CDR off per policy.
Email archiving with legal hold
Quarantine only holds blocked mail. The email archive, by contrast, keeps a copy of every scanned mail. You choose: inbound only, outbound only or all mail. Retention is about seven years by default. You can change it. After that, the gateway deletes the copies on its own.
In the archive you search by sender, recipient, subject, direction, scan result and time range. You can download the original mail when needed. With legal hold you lock single mails against deletion. You need this for a legal dispute or an audit, for example. The archive is off by default. So the gateway stores nothing until you decide.
Questions about quarantine and archiving
- How long does mail stay in quarantine?
- You set that with retention rules, if you like by scan result. The gateway cleans up expired entries on its own.
- Can staff release their own mail?
- Yes, through the daily digest. Each entry has a signed link to release and one to delete. The links are valid for seven days and only for that recipient.
- Is the email archive active right away?
- No. The archive is off by default. An admin switches it on and decides whether to archive inbound, outbound or all mail. Retention is about seven years by default and can be changed.
- Does CDR clean up an infected file?
- No. CDR only runs on attachments the scan has rated clean. The gateway blocks malware. It does not try to repair it.
See quarantine and archive live
We show you release, digest and archive search and work out suitable retention periods with you.
Request a demoHow we work with you
We want to work with you for the long run, not just deliver once. Our way of working has four steps. So you always know what comes next, who does what and what you get.
1. Free initial conversation
We learn where you stand and what you want. In 30 to 45 minutes we check if we are a good fit. We show you options and answer your questions. There is no obligation.
2. Current state review
We check where you stand today: tech, processes and rules. You get a list of strengths and gaps, sorted by urgency. Our offer is based on it.
3. Delivery with a dedicated lead
An experienced lead guides you through the project. You get clear goals, an open plan for time and cost, and a status every week. All results are written down and belong to you.
4. Running and reviewing
After the project we stay with you. We run systems for you, check them at set times and keep track of open tasks. When new threats or new rules come up, we get in touch.