04-08-2019 06:02 AM
We have been running Ironports now for 15+ years and have constantly being tweaking our SPAM levels. We have seen a large increase in SPAM delivered to our end users over the last 7 days and are wondering how other larger customer are using the AntiSPAM thresholds and if we are alone to see this.
Our current values are :
Ironport AntiSPAM
Default 90 for positively identified spam and 50 for suspected spam
Ours 80 for positively identified spam and 38 for suspected spam (based on Cisco heath check)
IMS
Default 90 for positively identified spam and 50 for suspected spam
Ours 85 for positively identified spam and 45 for suspected spam (based on Cisco heath check)
IMS appears to rate more agressively compare to Ironport AntiSPAM, using the lower values resultet in
false positives. For those who use custom value in production how far do you go ?
-Marc
04-08-2019 01:36 PM
For Anti-Spam we're using
Positive > 75
Suspect > 40
04-08-2019 03:22 PM
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: