Procedure

1. Log on to the Cloud App Security management console and go to Quarantine.
2. Select Exchange Server under Service from the left area.
3. Specify search criteria in either of the following ways:
   • Select facets from the left area.
   • Specify facets in the Search bar, select a date range from the Select Date Range drop-down menu, and then click Search.
     This allows you to select one or several facets and specify keywords to query items on a more fine-grained level.
4. Select one or several email messages, and then click Restore or Delete to restore or delete them.

   Note Download does not apply in this case.

   You can restore or delete an email message on either the Cloud App Security management console or the corresponding ScanMail management console.

   • If an email message is restored or deleted on the ScanMail management console, the ScanMail server reports the result to the Cloud App Security server.
   • If an email message is restored or deleted on the Cloud App Security management console, the ScanMail server resends or deletes the email message based on Cloud App Security's request within five minutes.