Sophos - Quarantine Central

Sophos - Quarantine Central

What is Sophos Quarantine Central?

Sophos Quarantine Central checks emails as they are sent and received for malicious content.

Warning from sophos re link in emailWhen you click a link in an email Sophos will check this link before it is opened/displayed. You will be notified if the site you are trying to view is a known to contain malicious content.

You should still be extremely careful before clicking links in emails where you don’t recognise the sender or you weren’t expecting. Don’t rely on Sophos as the only protection.

Why is internal mail blocked?

There is no difference between external and internal mail. The same checks are completed on all emails.

You should not automatically ‘trust’ an email because it originated internally. If a Key/Lifestyles account is compromised you are more likely to fall victim if you automatically trust an email because it has come from an internal source.

How do I access a blocked email?

Blocked emails will be held for 30 days.  If you receive a message from Sophos informing you an email has been blocked, it will be one of two versions:

1. Messages Quarantined:

If you receive an email from ‘Sophos’ informing you that a message has been quarantined:

Email blocked notification from Sophos

  1. Open the email.
  2. Look at the sender and subject - Is it something you’d be expecting. Is it something you are waiting on or require?
  3. Example email from SophosChoose to release or block the email based on this information. You can also choose neither option and ignore the email.

 

2. Policy Violation:

Policy Violation example emailIf you receive an “Policy Violation” email, it will have no options, it will only inform you that a message has been blocked.

  1. Look at the sender and subject - Is it something you’d be expecting. Is it something you are waiting on or require?
  2. If so, forward the email to ictsupport@key.org.uk asking for it to be released. We don’t need any explanations etc. “Release” will be enough (save on typing!).

We will then release this message for further checking and it will be sent on as soon as these checks are complete.