All messages that IMSVA postpones can be queried and viewed.
Procedure
After you perform a query for postponed messages, click the timestamp for an item
in the query
result table. The query screen appears showing the following information:
Timestamp
Sender
Reason
Recipient
Rules
Subject
Scanner
Original Size
Message ID
Internal ID
Attachments
If ATSE is enabled, IMSVA also displays the following
information:
Reason: Probable advanced
threat
If both ATSE and Virtual
Analyzer are enabled, IMSVA also displays the following
information:
Reason: Probable advanced threat
or Analyzed advanced threat
Virtual Analyzer
Status: Status of Virtual
Analyzer analysis
Next to Message view, click either Header or Message.
Click any of the following buttons:
Back to List: Return
to the query screen.
Release: Resend the message to
its original recipients.
Delete: Delete the message.
Download : Save the message to
your computer.
Tip
Trend Micro does not recommend saving messages or attachments that
violated an antivirus rule.