An administrator is managing multiple Cisco ESA devices and wants to view the quarantine emails from all devices in a central location. How is this accomplished?

Question

Options

• ADisable the VOF feature before sending SPAM to the external quarantine.
• BConfigure a mail policy to determine whether the message is sent to the local or external quarantine.
• CDisable the local quarantine before sending SPAM to the external quarantine.
• DConfigure a user policy to determine whether the message is sent to the local or external quarantine.

• A
  3% (1)
• B
  3% (1)
• C
  84% (31)
• D
  11% (4)

Explanation

To centralize spam quarantine from multiple Cisco ESA devices onto a Cisco Security Management Appliance (SMA), you must first disable the local quarantine on each ESA (C) before configuring the external/centralized quarantine. This is a prerequisite enforced by the ESA - the local quarantine and the external quarantine are mutually exclusive. Once the local quarantine is disabled, the ESA can be pointed to the SMA's centralized spam quarantine, allowing administrators to review all quarantined mail from multiple ESAs in one place. Option A is incorrect because disabling VOF (Virus Outbreak Filters) is unrelated to quarantine centralization. Option B is incorrect because a mail policy determines how messages are processed, not the quarantine destination type. Option D is incorrect because user policies do not control quarantine routing.

No community discussion yet for this question.