MicrosoftIs there anyway to retrieve or review these blocked messages? Or are they gone once blocked?
It would be helpful, and hopefully already possible, to send these "blocked" messages directly to an admin...or an area and admin has access to (like the quarantine page)...so the messages can be reviewed and released if they have legitimate non-harmful content. If all the blocked messages are simply deleted and there is no way to get them back that's a bit less useful at least for us.
We often have a subcontractor or some other partner that gets infected. We can't block their domain entirely since we do work with them and many of the messages are still legitimate. So right now it's a complicated process of setting up transport rules to intercept the message so someone can review it before getting it to the end user. This is basically unworkable on a larger scale at least when working in the UI (there is probably a way to efficiently script this). So it would be nice to have this option in the UI where with one click the messages can be sent for review instead of getting deleted entirely.
