cisco ironport not rejecting email

[justinus.budi]

Hello, 

We have some HAT overview with this configuration

Sender Group : SUSPECTLIST

Mail Flow Policy : THROTTLED

THROTTLED configuration have connection behaviour Reject

The question is why email sender that categorized as SUSPECTLIST still accept by Ironport?

OS Version 14.2.0-620

[balaji.bandi]

You need to post the complete log of that connection for us to understand?

you can use FAQ to check the logs :

https://www.cisco.com/c/en/us/support/security/email-security-appliance/products-support-faq-list.html

[justinus.budi]

Thank you for your answer. I have open case related this problem. The email hit wrong policy configuration.

Thanks