Question
Can a Message Filter divert messages to the Cisco Email Security Appliance (ESA) Spam Quarantine?
While the main reason for the ESA Spam quarantine is to quarantine spam, some customers may want to send messages to the quarantine using a Message Filter. This can be accomplished by adding the following header into the "insert-header" action of a message filter: X-IronPort-Quarantine.
Example message filter:
divert-to-ISQ:
if (rcpt-to == 'joe@example.com' ) {
insert-header("X-IronPort-Quarantine", "Yes"); }
Note that the header itself is sufficient for the redirection, a header value ("Yes", "True") can be given, but is not required.