About content incident folders
Content incident folders help you organize, monitor, and manage the incidents of content filtering policy violations. As a best practice, you should create a content incident folder for each type of content filtering policy that you use. For example, if you use the HIPAA template to create a policy, create a HIPAA content incident folder. You can use that folder to monitor HIPAA policy incidents.
Create the content incident folder before you configure a content filtering policy. That way, when you create a content filtering policy, the folder is an available option when you select the action to create an incident. If you do not specify a folder in which to create an incident, messages that violate that policy are filed in the
Informational Incidents
folder. When you create a content filtering folder, you must choose the type of folder you want to use.
Symantec Messaging Gateway provides the following types of content incident folders:
Hold for Review (Content Quarantine) | Use this type of folder for the incidents that you want to review. This folder lets you retain the messages that trigger content filtering violations so that you can review them and determine how to act on them. Any additional actions for that policy are deferred until the incident is reviewed. Messages in the Hold for Review (Content Quarantine) folder are expunged based on the settings that you specify, even if they have not been reviewed.These folders appear in the Control Center as Quarantine Incidents. |
Informational Incidents | Use this type of folder to track the incidents that are at a lower priority than the ones that you want to hold for review. |
You can also configure the following settings for each folder:
- Archive tag and encoding for the tagThis setting is optional.
- Expunger settingsThe maximum content incident folder size is required. The setting for the number of days to hold an incident before it is expunged is optional.
- Notification message that indicates an incident has been logged to that folder and the people that you want to receive the notificationThis setting is optional.
Symantec Messaging Gateway supports up to 1,000 content incident folders, including the default Informational Incidents and Quarantine Incidents folders. You must have Full Administration rights or rights to modify settings to create content incident folders.