Message history. Watchguard XCS

Troubleshoot your WatchGuard XCS

Troubleshoot Content Issues

If a message has been delivered to the WatchGuard XCS successfully, it will undergo security processing before delivery to its final destination. Many of the security tools used by the system, such as Intercept Anti-

Spam, Content Filtering, Anti-Virus scanning, and Attachment Control, will cause the message to be rejected, discarded, and quarantined, without the message being delivered to the recipient. These tools can often be misconfigured allowing legitimate messages and requests to be incorrectly rejected or quarantined. If you find that certain messages are being blocked when they should not be, check the following:

ƒ Is there a Specific Access Pattern, Pattern Filter, or Content rule that applies to the message?

ƒ Is the attachment type or content filtered via Attachment Control or Content Scanning?

ƒ Are any of the Intercept Anti-Spam features blocking the message?

ƒ Do words from the Objectionable Content Filter (OCF) or Spam Dictionaries appear in the message?

ƒ Is the message or its attachments over the maximum size limit?

ƒ Does the user belong to a policy that may block the message?

Message history

Every email message and web request that passes through the system generates a database entry that records information about how it was processed, filtered, and delivered. To see how the message was processed, you can check the message history to see the disposition of the message. Using this information, you can find out which security process is blocking the message, and then check the configuration and rules to ensure that they are set properly.

To view the message history:

1. Select Activity > History > Message History .

2. Examine the Status column for full information on how a message was processed and its final disposition.

User Guide 445

Troubleshoot your WatchGuard XCS

3. Click on the Message ID to view the details of a message.

Dispositions and the final Intercept score, if any, are listed below the details table in the Message

Disposition section.

446 WatchGuard XCS