There are five types of rules in HES/HES - Inbound Filtering: Malware, Spam, Attachments, Content, and Size.
The end user can only see a list of emails triggered by the Spam rule. An administrator is able to see the list of quarantined emails triggered by all five rules. This is because Trend Micro does not want anyone aside from the administrators to know or release anything that is not spam.
Consider the following examples:
- When an administrator has a rule to quarantine corporate content-sensitive messages, we do not want an end-user to see and to be able to release the message.
- When an administrator quarantines a virus, we do not want it to be released.
The administrator can check the type of triggered rule a quarantined email has through the Quarantine Query. Refer to the image below:
Click image to enlarge