A security engineer for a manufacturing firm needs the Cisco Secure Email Gateway (ESA) to protect users during the window between when a new malware campaign begins and when traditional antivirus signatures become available. The requirement is to quarantine suspicious messages that reference not-yet-classified threats, dynamically re-scan them as intelligence matures, and release them automatically once deemed safe. Which ESA feature meets this requirement?