Exempt sender from [SUSPICIOUS MESSAGE] ?

[ashaw216]

  There is a company that regularly sends us email from a specific address, but it's being prepended with [SUSPICIOUS MESSAGE] and the URLs are being rewritten. How can I exempt this sender from this action? It looks like this would be a new Content Filter that bypasses Outbreak Filtering, does that sound right? Thanks.

[David Miller]

This is probably being done by Outbreak Filter (used to be called Virus Outbreak Filter or VOF.  The rules to determine whether a message is suspicious are determined by Cisco, but you can decide in mail policies or filters what to do about it.  One of the actions is to rewrite any URLs contained in a suspiscious message, nother would be to prepend the subject.  Have a look at chapter 14 of the user guide (outbreak filters).