Early detection / pending quarantine notification – Google Message Security for Google Apps Administration Guide User Manual
Page 400

400
Message Security for Google Apps Administration Guide
Used as the location to send notifications as found on each user's user
record.Note: By inserting this address as the “To” recipient, the notification is
sent to a recipient which may not necessarily be the owner of the Message
Center account. In most cases, you should use the Notice Address for the
“To” line-if no “Notice Address” address exists for a user record, this field
defaults to inserting the normal user “Address” (above). The Notice Address is
especially important if another administrator might manage a user's Message
Centers on behalf of the user-for example, in a corporate environment to
enforce user-level settings while also denying account access.
<-isp->
The <-isp-> token is replaced by the value in the “Customer Name” field of the
organization.
<-extra->
If web access is disabled, explains that; otherwise nothing
Early Detection / Pending Quarantine Notification
To view the message:
How the protection works: <-isp->'s email security service
automatically performs additional virus scanning on this message
for <-release_time-> hours for your protection. If a virus is
found, the message is deleted or moved to your Virus quarantine.
Otherwise, the email security service delivers the message to your
inbox as usual.<-isp->