SSQ Overview - xorlab

The Self-Service Quarantine (SSQ) gives each user access only to their own emails. For a basic setup follow:

Set Up the SSQ

Afterward you can further customize it as shown below.

Step	Description
Set Up the SSQ	Mandatory. Basic configuration of the SSQ.
Enable Release Requests	Optional. Allow your users to request the release of dangerous emails in the SSQ.
Enable Attachment Airlock	Optional. Quarantine all encrypted attachments that cannot be decrypted. The user can enter the password in the SSQ to release it.
Support Shared Mailboxes	Optional. Allow users to access shared mailboxes in the SSQ.

Multi-Tenancy

All SSQ configuration lives in guarded_tenants.yml and is therefore already tenant-aware. Follow the same steps as above, once per tenant. There is one exception: for Support Shared Mailboxes, use Auto-Login. The M365 shared mailbox script is not recommended in a multi-tenant deployment. You can also give each tenant its own logo and texts in the quarantine notifications, see Customize Tenant Notifications.

Set Up the SSQ

​Multi-Tenancy

Multi-Tenancy