IronPort 8.5.6 Mail Policies not applying

[epanico01]

Hi all,

we are facing a curious situation on our C170. We have configured 3 different mail policies to perform some checks (executable file stripping, quarantine of unwanted vendor messages, dropping messages of some known local spammers) and have assigned each of them to our main SMTP domain, using Recipients:@example.it (real domain masked). Each policy has a specific Content Filter to perform the required action.

It seems that only the policy higher in order is been applied to incoming mails. This let us think that if a recipient matches one policy, even if no action is required from content filter, the policy checking process ends, without parsing the following policies. Is that possible?

There is a way to configure the ESA to let it check each incoming mail against all the existing policies?

Thanks in advance to who provide us answers and suggestions

[Ken Stieers · Accepted solution]

You are correct.  The engine works down the policy list, matching the FIRST users, and does everything in that policy left to right.  And that's it.

Just like a firewall rule or ACL.  Start at the top, apply the first one that matches.

If you want separate content filters, just order them under Mail Policies/Incoming Content Filters.

[epanico01]

Thanks a lot Ken,

this means I have to collapse all content filters in a single policy applied to the same Recipients Group... this will be less visible in the administration console but, if it's the only way...

[Ken Stieers]

Its not completely invisible... the filters show up in the "Content Fitlers" box...