Content incident folders let you monitor incidents and determine whether a policy needs to be adjusted. They also let you manage the incidents that Symantec Messaging Gateway detects based on the policies that you configure.
Notify the content administrators that messages are in content incident folders.
Symantec Messaging Gateway can notify the persons that you specify that an incident has been added to a content incident folder. Symantec Messaging Gateway provides a default notification message that you can modify as necessary.
You can notify Symantec that the message was missed spam or a false positive. Based on this information, Symantec creates a custom rule that can improve spam detection and help administrators control false positive incidents.
This feature is only available for quarantine incident folders.
After you review incidents and take the action that you want, you can archive the message. You can archive one or more messages from the Incident Manager page or one at a time from an incident's detail page.
You can export all of the information about an incident's history. For example, when the incident is created, when a status changed, message review actions, and comments. You can select the encoding that you want to use for the exportation and the delimiter.
You can forward incidents in incident folders for further review. When you forward an incident, you can create a comment for the person to whom you forward the message to provide instructions or deadlines. You can also specify whether you want to attach the original message.
Symantec recommends that after you review and act on incidents, you delete them to reduce the volume of incidents in your incidents folders. When an incident is deleted, it no longer appears in the incident folder, and the incident cannot be retrieved.
After you review an incident in a Quarantine Incidents folder, you can approve it, reject it, perform a custom action, or continue to hold it. When you remediate an incident in a Quarantine Incidents folder, Symantec Messaging Gateway takes the action that you specified in the content filtering policy actions for Message Review Approved Actions, Message Review Rejected Actions, and Message Review Custom Actions.
Update an incident's status to monitor its progress.
You can update an incident's status to reflect changes to the incident. The incident's status lets reviewers know what stage of the review process the incident is currently in and what the results of the review are.