Managing the blocked message queue

Administrator Help | TRITON AP-EMAIL | Version 8.2.x

The Main > Message Management > Blocked Messages page lists all blocked messages from most queues across all appliances together in a single table, with a column entry that indicates the name of the queue in which a message is stored. Messages in the archive and Delayed Messages queues are not included on this page.

Use the View from/to fields to specify the desired date/time range for the entries you want to see. The calendar includes the following options:

Change the month and year by using the back and next arrows around the month and year at the top of the calendar.

Set the calendar to the current date by clicking the date in the lower left corner of the calendar.

Click Clean to clear the current date/time calendar selection.

Click Today to set the calendar date to today's date.

Set the time range in hours and minutes in the entry fields to the right of the calendar. Click the arrow to the right of the View date/time range to display the desired queue items.

You can also perform a keyword search of all blocked messages, or refine the search by specifying that only senders, recipients, subjects, or policies applied are searched. You can also search on an individual queue or on the name of the appliance that processed the messages (Processed By category). Enter a keyword and click Search.

Configure how many messages you want to view on each page of the queue in the per page drop-down list (25 [the default], 50, or 100).

Information displayed in the list of messages includes the following items:

Sender email address

Recipient email address

Message subject. You can view message information and message contents by clicking the link in the Subject column to open the View Message page. See Viewing a message in a queue.

Message size

Date/time of message receipt

The policy and rule applied to the message. If a DLP policy is applied to a message, a View Incident link opens DLP incident information in the Data module, where processing of this message occurs.

Queue name (for example, spam, virus, exception, encryption-fail, or decryption-fail)

Message type (for example, spam, virus, exception, commercial bulk, encryption error, or decryption error)

The name of the appliance that processed the message is included in the Processed By column.

The Reason for Quarantine column contains an entry indicating why a message has been sent to a quarantine queue:

Antivirus filter

Email hybrid service

URL analysis filter

Bounce address tag validation

Digital fingerprinting antispam tool

LexiRules antispam tool

Heuristics antispam tool

Commercial bulk email filter

Custom content filter

Block List (Personal Email Manager Always Block List entry)

Archive feature (a Settings > Inbound/Outbound > Message Control setting)

Data loss prevention

Exception (message exception)

For a message attachment analyzed by Threat Protection, a View report(s) link opens a pop-up box with links to a Threat Protection report on each file examined

You can select a message in the blocked messages queue and perform the following actions:


Action	Description
Deliver	Deliver the message to its recipient(s).
Delete	Delete the message from the queue.
Reprocess	Delete the message from the queue and restart the email processing function as if the email system were receiving it for the first time.
Not Spam	Report that the message should not be classified as spam and release the message for delivery. This option is available only when spam messages are selected.
Refresh	Refresh the queue contents list to view up-to-date queue contents.

The More Actions drop-down list includes the following operations:


Action	Description
Resume Processing	A message that has both spam and virus characteristics may be isolated by 1 type of filter before it has been processed by the other type. If the original quarantine is a false positive, use this action to make sure the message is processed by all relevant filters rather than delivered after only the first analysis.
Add to Always Block List	Add the message sender to the Always Block List.
Add to Always Permit List	Add the message sender to the Always Permit List.
Forward	Forward the message to 1 or more recipients. The forwarded message is added as an attachment to the forwarding message.
Download	Download the message in .eml format. Downloaded email is saved in a zip file.
Reprocess all messages	Reprocess all the messages in your search result. Only the first 5000 entries in your search result are reprocessed.
Delete all messages	Delete all the messages in your search result. Only the first 5000 entries in your search result are deleted.