Advisory: Sophos Email Appliance – Time-of-Click (ToC) incorrectly quarantining emails

Sophos is investigating an issue related to Time-of-Click incorrectly quarantining emails. This issue is caused when an encoded URL is larger then the max 990 character limit of ToC, the message is then placed into quarantine with the reason “TimeOfClick”.

Applies to the following Sophos product(s) and version(s)

Sophos Email Appliance

This issue potentially affects Sophos Email Appliance customers on v4.5.1.0.

Users are not aware that their message has been quarantined, and only the administrator can view and release them.

This issue will be resolved with the scheduled hotfix release of SEA v4.5.1.1:

  • First Customer Shipment: 30 Apr 2019
  • General Availability: 7 May 2019

Please follow this article for the latest updates.

Customers experiencing issues may temporarily disable ToC in the meantime.

If you’ve spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article.

This is invaluable to us to ensure that we continually strive to give our customers the best information possible.


Leave a Reply