Reviewing and restoring an email in quarantine

Emails found risky go to the Quarantine folder, not the inbox. The user reviews the email here with its reason; if the email is trustworthy, they move it to the inbox with Release from quarantine. SmartMail learns this correction and takes it into account for similar emails.

  • User with quarantine permission in the mailbox

How to review and restore an email in quarantine?

Emails found to be risky do not go to the inbox but to the Quarantine folder. Who can do this: A user with quarantine permission in the mailbox. The notification "Email removed from quarantine, moved to Inbox." appears. The user reviews the email here with its reason; if the email is trustworthy, they move it to the inbox with Remove from quarantine. SmartMail learns this correction and takes it into account for similar emails.

Steps

  1. Open the Quarantine folder on the left and click the email you want to review. The quarantine reason is shown above the email; for details, click the badge next to the sender name 1.

  2. If the email is safe, click Release from quarantine 2.

An email in quarantine: a risky security badge next to the sender name and a Remove from quarantine button
  1. 1Security badge
  2. 2Move to Inbox
An email in quarantine, with demo data.

If there are no other emails from the same domain in quarantine, the email is moved to the inbox immediately. If there are other emails, a window opens:

  1. To remove only this email, click This email only 1.

  2. To also remove other emails from the same domain, select Also remove other … emails; if you want emails from this domain never to be quarantined again, select Add this domain to the allowlist 2.

  3. Click Apply to apply your selections 3.

Remove from quarantine window: only this email, also remove other emails and add the domain to the whitelist options
  1. 1Only this email
  2. 2Domain trust
  3. 3Applies
Remove from quarantine window, with demo data.
ResultThe "Email released from quarantine and moved to Inbox." notification appears.
CautionThe allowlist rule applies to the whole organization and is recorded in the audit log. Do not add a domain you are unsure about to the allowlist; releasing just the email is enough.

Related pages