cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
769
Views
0
Helpful
2
Replies

Different processing (treatment) of the same messages

Alibek Ismailov
Level 1
Level 1

Hello, one employee in my organisation sent over 8000 identical messages, some messages were sent on the same mail server, but only one message of 8000 was put in quarantine. Why Ironport didn't put others messages in quarantine?

2 Replies 2

Enrico Werner
Cisco Employee
Cisco Employee

With 7999 messages getting delivered, the question rather should be why was this one message not delivered, but put into the quarantine? If it was the CASE engine that flagged the message as Spam then check your outbound mail policies and consider disabling Anti-Spam scanning for outbound mail. CASE works best on inbound mail as it was designed for that and when enabled on outbound mail may cause false positives.

(*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

8000 messages were his own advertisement (not work), so ironport must block it.

 

Can i somehow restrict amount of messages sent from one user on Ironport?