cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Cisco Secure Email Support Community

Product Support Talos Support Cisco Support Reference + Current Release
Gateway Reputation Lookup Open a support case Secure Email Guided Setup
Gateway: 14.0.2-020
Cloud Gateway Email Status Portal Support & Downloads docs.ces.cisco.com
Email and Web Manager: 14.1.0-239
Email and Web Manager Web & Email Reputation Worldwide Contacts Product Naming Quick Reference
Reporting Plug-in: 1.1.0.136
Encryption Bug Search
Encryption Plug-in: 1.2.1.167
Cloud Mailbox Notification Service
Outlook Add-in(s): More info

1004
Views
0
Helpful
2
Replies
IronportCJH
Beginner

Scan outbound email for spam and quarantine it?

Hello,

We have two C350 appliances that we're looking at configuring for outbound email.

Currently, inbound email is scanned and positively identified spam is quarantined locally.

I am testing outbound email and would like to scan outbound email for spam to combat an increasing number of compromised email accounts that have pumped out spam. The outbound mail policy is configured to apply a custom tag to the header, prepended in the subject line with "Spam" and send it to the local quarantine.

What I've found is that Trace indicates that the test spam messages will be correctly handled, tagged and sent to the spam quarantine. The exact same message content, email addresses etc when sent out from an internal test mailbox is delivered to the external test mailbox without being tagged and quarantined.

Can anyone suggest why this is the case?

Is there another solution to the issue of internally compromised email accounts? We have staff sending legitimate  bulk email (often with unverified / invalid addresses) so I don't want to throttle their sending.

Cheers,

Chris

2 REPLIES 2
john-copeland
Beginner

Have you enabled anti-spam on the default Policy under Outgoing Mail Policies?

Hello Chris,

I suggest you take a look at your logfiles. maybe the missed messages are not seen as "outbound" mail and as a result of that not passing your outbound policies. Such details should become clear when digging your logs.

good luck!

Steven

Create
Recognize Your Peers
Content for Community-Ad