Quarantine Email Message Task

After identifying a suspicious email message, you can quarantine the message from all supported mailboxes protected by Cloud App Security using context menus on the Trend Micro Vision One console.

Important:

This task is only applicable on supported mailboxes protected by Cloud App Security.

  1. After identifying the suspicious email message, access the context or response menu and click Quarantine Message.

    The Quarantine Message Task screen appears.

  2. Confirm the targets of the response.
  3. Select the mailboxes that this task applies to.
    Important:

    This task is only applicable on supported mailboxes protected by Cloud App Security.

    If the target message is not found in a supported mailbox protected by Cloud App Security or users have already deleted all instances of the message, you cannot create the task.

  4. (Optional) Specify a Description for the response or event.
  5. Click Create.

    Trend Micro Vision One creates the task and displays the current command status on the Response Management app.

  6. Monitor the task status.
    1. Open the Response Management app.
    2. (Optional) Locate the task using the Search field or by selecting Quarantine Message from the Action drop-down list.
    3. View the task status.
      • In progress... (): Trend Micro Vision One sent the command to the managing server and is waiting for a response

      • Successful (): The managing server successfully received the command

      • Unsuccessful (): An error or time-out occurred when attempting to send the command to the managing server

    If you determine that a quarantined message is malicious, you can delete the message using context menus on the Trend Micro Vision One console.

    For more information, see Delete Email Message Task.