McAfee SMEFCE-AI-DA - Email Security Service Inbound Administration Manual page 106

Monitor Users' Quarantined Email
2 Check the email for any of the following, depending on the Threat type:
If the Threat type is Spam, check the subject line and body of the message, as well as
the Status line for the spam score.
If the Threat type is Content, check the Status line for the word or words that violated
the content filter.
If the Threat type is Attachment, check the Attachments list for size and/or type of
file or for html code violations. The Content Type is based on the MIME protocol.
If the Threat type is Virus, check the Virus list for the viruses found.
3 Note the IP address listed in the message. This address is the last hop the message took
prior to delivery to Email Protection. The IP address can be useful in tracking the path
of a message and can help identify spoofed senders.
4 After checking a message, do one of the following:
•
98 Proprietary: Not for use or disclosure outside McAfee without written permission.
Delete the message as described in Delete Quarantined Messages.
Email Protectionr Administrator Guide
November 2012