IronPort outgoing suspected spam mark as spam

[Alexey Laptev]

Hello! 

I have Outgoing Mail Policy and Outgoing Content Filter on IronPort. Outgoing spam message dropping. Outgoing  suspected spam message deliver. 

When user gets incoming suspected spam message and want forward the suspected spam message - Ironport mark the  suspected spam message - spam and drop it. 

How do that outgoing suspected spam message not marking spam? 

[Libin Varghese]

Hi Alexey,

The anti spam engine takes into account various factors in order to determine if the email is suspect spam or positive spam, this would include the email body, attachment, header information etc.

I would recommend opening a TAC case if you require specific information on the reasons for the anti-spam engine marking an email as spam.

However, I would like to say that the anti-spam rules are dynamic and it is possible that an email marked as suspect spam would later on be caught as positive spam in a difference of few minutes.

Thanks
Libin

[Alexey Laptev]

Thanks.