Not all Incoming mail policies applied for incoming mail

[SandisKajins]

Hello, 

Using Cisco C100V Email Security Virtual Appliance Version: 13.0.0-392

We have configured content filters, configured incoming mail policies.  Everything works as expected only have issues, when incoming mail attachments matches more than one content filter. 

For example:

We have filter to quarantine compressed files (.zip, .rar, etc) and we have filter to quarantine old office files (.xls). 

We have set up users and senders to to allow these types of files. 

So sender sends an e-mail with attachment (.zip file archive with .xls files inside). 

On message tracking I see that this recipient matches allow compressed file policy, but it doesn't look forward and check, that this recipient has assigned allow old office file policy too and as there are .xls files inside archive, email is quarantined due to old office files content filter. 

Does it check incoming mail policy by order in ESA and once met one policy, it doesn't look if other policies are applied too? 

What can we do, to allow e-mails with more than one filter conditions to get through these filters?

Thanks. 

[Libin Varghese]

Hi,

Incoming mail policies are matched top down, and only a single policy is applied to an email based on first match.

All filters applied to that incoming mail policy will be applied to the email.

So the filters would need to be modified on each policy so that all required checks are done on each policy.

Regards,

Libin