Currently the quarantine portal displays the "friendly name", and if you choose to whitelist or blacklist it is the friendly name that is used. Sometimes with malicious or spam e-mails; it is the from that needs to be blacklisted (or possibly the sending IP address). But there is currently no easy way to blacklist (or whitelist) either of these two fields from the portal. You need to goto the transcript copy the relevant values and then goto the security tab of the portal to blacklist the relevant value.

Ideally if this could be done from the quarantine section directly (or perhaps from within the transcript); that would be far more convenient.

Thanks

Vaughan