| Too large
|
Messages that exceed any size limits defined by the policy. |
| Extension masked
|
Delivered messages that contain an attachment whose file extension was masked as specified in the content filtering policy. You can restrict searches to one or more specific
extensions by listing them in the associated field, separated by commas. |
| Blocked attachment
|
Messages that have been quarantined due to their file type being specified in the content filtering policy. You can restrict searches to one or more specific extensions by listing
them in the associated field, separated by commas. |
| Lexical rule
|
Messages that have contravened a lexical rule in the content filtering policy. You can restrict searches to specific sub- reasons—either messages caught by the lexical filter or
messages that have experienced analysis failure—by selecting the relevant option from the drop-down list. |
| Blocked images
|
Messages that contain an image attachment that has been analyzed and is considered inappropriate. Messages with this status may also have been quarantined because the image could
not be analyzed, for example because it was too large. This option only appears if you are licensed for the Forcepoint Email Security Image Analysis Module. |
| Copy kept
|
Messages marked as available for delivery, but with a copy kept for review by administrators. If you have exceeded your quota for this type of message, the message delivery is
logged, but you cannot view the content. To free quota space, delete some messages. Note that messages with this status may also have been caught by the lexical filter and quarantined
for other reasons. |