Quarantine for viruses in Mail Security

[katbert 3]

I'm using ESET Mail Security for Exchange 6.3.10005.2

I created rules, which send to quarantine messages with some attachments (*.js, *.bat etc).

 

Is it possible to sent to quarantine messages with viruses too?

With default settings recipient of message with virus receive message with modified subject [found threat Eicar test file] and strange attachment ATT00001.txt

[katbert 3]

Eset save deleted viruses copies to one qurantine (Tools-Quarantine), and filtered by rules messages to second quarantine (Mail quarantine).

 

Is it possible to save messages with viruses to "Mail quarantine"?

[katbert 3]

On this screen - I see message with virus in Mail Quarantine:

hxxp://help.eset.com/emsx/6/en-US/idh_quarantine.htm

Edited August 10, 2016 by katbert

[filips 44]

Hi katbert,

you could create a mail transport rule like this

Condition: Antivirus scan result - is not - Clean
Action: Quarantine message
 

[katbert 3]

This rule can redirect message with virus to qarantine.

But redirect with cleaning it.

Is it possible to redirect messages to quarantine without cleaning?

Edited August 11, 2016 by katbert

[filips 44]

You need to disable cleaning in scanner settings:
Server/Antivirus and antispyware/Mail transport protection/Threatsense Parameters/Cleaning level to "No cleaning"

and to redirect infected messages to quarantine set:
Server/Mail transport protection/Action to take if cleaning not possible to "Quarantine message"

NOTE: you may need to enable cleaning when releasing such email - otherwise it would return to quarantine (or create a rule to skip AV scan for such emails)

[katbert 3]

Thanks!