Ironport/Spamblocker Quarantine Configuration

[Cybertech Ltd.]

Dear Colleagues,

Can I configure an Ironport Anti Spam device to quarantine all suspect messages including the ones  rejected/bounced by reputation filtering?

By default these are rejected but not stored anywhere and no information  about them is available.

Thanks a lot for your help.

Best Regards

Michael Hatzithedorou

[Christopher Smith]

Hi Michael,

While you can configure the appliance to quarantine messages that are flagged as suspected spam or just spam, you will not be able to quarantine messages stopped by reputation filtering. The reason why you can't quarantine these messages is they never enter the policy processing chain. If a sending IP is rejected by reputation filtering the connection is dropped thus the message never makes it far enough in for further processing.

IPAS oir IronPort Anti-Spam does often utilize some components of reputation filtering while scanning content but this is a different process and occurs after the message has made it into the appliance. At that point the messages are marked either positive or suspect spam.

Christopher C Smith
CSE

Cisco IronPort Customer Support