Serve Quarantine Digest on a different port to Admin Console
When you configure the quarantine digest to reference the external IP address of the XG unit, the digest email references the "Admin Console Port". This is absolutely absurd. It effectively means that I need to open up access to the Admin portal to the entire world without restriction - this is a MASSIVE security risk.
The easiest solution is to change the XG to use the User Portal port for the "release" link under the action heading.