[WARNING: AMP - ATTACHMENT UNSCANNED][A/V UNSCANNABLE][SUSPECTED SPAM]

[engineering127]

Hello friends, could you help me with my query?

The antispam is sending mail to quarantine ( the problem occurs with a domain.), checking the logs it is observed that the Subject mentions the following: [WARNING: AMP - ATTACHMENT UNSCANNED][A/V UNSCANNABLE][SUSPECTED SPAM]

Could you tell me why this message appears in the subject?

The strange thing is that previously these emails arrived in the users' inboxes without problems, however, during this week they have been sent to quarantine.

I appreciate your support, since I am just starting to use this antispam tool and I am a little lost.

[Ken Stieers]

So in the gui, under Mail Policies/Incoming Mail Policies, you'll see each of the policies you have in place... the first box in the grid is the criteria for each policy based on sender and recipient, matched from top to bottom. Once it decides which policy applies, it processes from left to right through the various engines. Each engine has options on what to do to the message, which you can set by clicking into the box... so it can do things like prepend/append to the subject, add headers, quarantine, etc.

In this case this email couldn't be scanned by the AV or Malware engines, and the SPAM engine thinks it might be spam...
The attachment might have been too big? Or a zip file with too many nested zips.