Quarantine configuration
By default MetaDefender Cloud Email Security uses the internal quarantine mode for both blocked and allowed-and-sanitized emails.
Blocked emails
Enable Security Rules >rule/ ADVANCED THREAT PREVENTION / Quarantine original email to send the original copy of blocked emails to the quarantine.

For details see Configuration/Policy.
Disarmed and reconstructed emails
Enable Security Rules >rule/ ZERO-DAY MALWARE PREVENTION / Quarantine original email to send the original copy of disarmed and reconstructed emails to the quarantine.

For details see Configuration/Policy.
Quarantine reports
Quarantine reports configuration can be done under Settings > Alerts & Reports / Quarantine Reports.

Cleanup
Automated quarantine cleanup can be configured under Settings > Data Retention / Quarantine cleanup schedule.

Entries pinned in the quarantine won’t be removed by cleanup. For details see Operating/Quarantine.
