Skip to main content
If enabled, end-users can request the release of quarantined emails via the SSQ portal. This functionality can be enabled separately for each verdict, and works only for emails the user cannot release themselves.

​
End-user view

For emails in an eligible quarantine, the end-user sees a Request Release button in the upper-right corner.
  • After clicking the button, the email status changes to: RELEASE REQUESTED
  • Once an analyst reviews the request, the status updates to:
    • RELEASE APPROVED – if the analyst releases the email
    • RELEASE DENIED – if the analyst denies the request (the email stays in quarantine)

​
Analyst workflow

The summarized workflow for an analyst looks like this:
  1. You get notified about the newly requested release. There are a few different options:
    • Via email, triggered by each release request. This can be enabled by an admin user as described in Enable request notifications.
    • By manually searching for status:releaserequested.
    • By creating and using a saved search for status:releaserequested.
  2. You analyze the email to see if it is not harmful. The page Understand an Email Verdict provides more details to understand why a certain verdict was set.
  3. If it is benign, you release the email via the Release button.
  4. If it is malicious, you deny the request via the Deny Release button.
Below you can find all status related to the release request feature, such that you can use them in the search:
Saved SearchCreate a saved search for the status RELEASE REQUESTED to quickly access all pending requests.