You can view and download emails that generate a riskware alert when the riskware rule is set to either Alert Only or Quarantine. Emails are delivered to the recipient, and a copy is saved on the appliance for cleanup.
Prerequisites
Administrator or Operator access to the Email Security - Server appliance
To view or download an email:
In the Web UI, click the eAlerts > Riskware tab.
Select the email that generated the riskware alert.
Click View Email or Download Email.