When the appliance is deployed in Block analysis mode, an administrator can release emails from the quarantine, and mark them as non-malicious so that they can be delivered to the intended recipients.
Note
When the Email Security - Server appliance is deployed in Drop analysis mode, Monitor analysis mode, or Tap/Span analysis mode, an administrator cannot release emails from the quarantine.
You can release an email from the quarantine only using the Web UI.
Prerequisites
Administrator or Analyst access to the Email Security - Server appliance
The quarantine folder contains one or more malicious emails.