Some mail clients (primarily some versions of Outlook) show this when there is a mismatch between the From address and the Envelope Sender address in the headers of the message.
The 'on behalf of' is being added by the mail server since the headers do not match. The workaround for this on the IronPort device is to make the friendly From address in the spam notifications match the address specified in the 'Deliver Bounce Messages To' field. These settings are in the Monitor > Quarantines> IronPort Spam Quarantine > Spam Notification page in the GUI.
If you want users to receive Spam notifications but not be able to perform any action, even see the e-mails, you should be able to do it by customising the message body, and removing what you don't want to be in there:
Meet the Authors Event - CCIE Security in a Remote and Cloud Driven Network: SASE and Beyond
(Live event – Thursday, 29th, 2021 at 10:00 a.m. Pacific / 1:00 p.m. Eastern / 7:00 p.m. Paris)
This event will have place on Thursday 29th, April 2021 at 10...
Application Protection, Availability & Security
Join our webinar May 6th to gain valuable industry insights into the most recent application cyber attacks and to understand the potential impact bot traffic is having on your business.
The purpose of this document is to demonstrate how ISE authenticate / authorize a user that uses a smart card (PIN + Certificate) and password mechanism to login their system. This document describes the components used for this setup, configuration of IS...
For all versions of the Email Security Appliance (ESA) and Security Management Appliance (SMA), some Secure Sockets Link (SSL) certificates issued from the QuoVadis root certificate authority (CA) trust chain before 2021-03-31 cannot b...