Do not quarantine replies to outgoing messages

[marco.daldegan]

Hi, we have several cases where a message to several recipient (almost a campaign) is sent out from a user (an invitation to an event, usually). Replies to these emails are getting caught by graymail engine as Bulk, and quarantined according to policy. But since these are replies to our own messages, replies are legitimate and should NOT be quarantined. Is there a way to achieve this? I'm thinking of a mechanism similar to BATV tagging, allowing legitimate replies to pass through the Ironport without being quarantined.

Thanks

[jorandre]

It sounds like these messages are false positive graymail. If that's the case, the best way to address these false positives is to submit the messages to Cisco so we can update the graymail rules.

The following article explains how to submit false positives to Cisco: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117822-qanda-esa-00.html

I hope that helps.