Procedure

1. Go to Mail Areas & Queues → Query.
   The Quarantine tab displays by default.
2. Click the Archive tab.
3. Under Criteria, configure the following:
   • Search: Select the archive area, the reason the message was archived, and the scanner that scans the message.
   • Dates: Select a time range.
4. Specify values for the following:
   • Sender
   • Subject
   • Recipient(s)
   • Violating Attachment(s)
   • Rule
   • Message ID

   Note When querying a message containing multiple recipients or violating attachments, type *string* (where string is the name of one of the recipients or attachments).

5. Click Display Log. The results appear at the bottom of the screen showing the timestamp, sender, recipient, subject, and reason for archiving the message.
6. To change the display, do any of the following:
   • To sort the table, click any of the column headings (except reason).
   • If too many items appear on the list, click the arrow buttons on top of the list to move to the next page or select the desired page to view from the drop-down list.
   • To change the number of items that appears in the list at a time, select a new display value from the drop-down list at the bottom of the table.
7. To view details about any archived message, click the timestamp for the item.
   The Archive Query screen appears showing the message and all of its details.
8. To delete any message, click the check box next to it in the query result table, and then click Delete.

   Note IMSVA only records and shows names of violating attachments if you have specified Attachment as a scanning condition. However, if the number of attachments in the message exceeds the maximum number specified in condition, the attachment name will not be shown.