Enabling End-User Quarantine Access and pointing to an LDAP server for authentication is the action that must be taken to meet this requirement. End-User Quarantine Access is a feature that allows users to access their personal quarantine on Cisco ESA using their email address and password, without requiring an administrator account or access to Secure Email and Web Manager. To enable End-User Quarantine Access on Cisco ESA, the administrator can follow these steps:
Select Security Services > IronPort Anti-Spam > End User Safelist/Blocklist Settings and click Edit Settings.
Under End User Quarantine Access, select Enable End User Quarantine Access. Under Authentication Server, select LDAP Server from the drop-down menu and choose an LDAP server profile from the drop-down menu.
Click Submit.