could you help me with misunderstanding of sce based subscriber spam notification?
I'm trying to implement the scheme where subscriber should be notified for the spam activity only once. So I set options like on pictures below, but my test subscriber blocked permanently. I even tryed to wait about a day, but without success. Obviosly if I drop subscriber session manually it will help, but it's doesn't seems as proper solution.
According to "Cisco Service Control Service Security: Outgoing Spam Mitigation Solution Guide", a subscriber doesn't considered as spamer after certain timeout of spam inactivity, I tryed to wait about a day, but without success.
So whether feature don't work or I do it wrong, so could you explain me please, how I should implement notifying subscriber only once till next spam accident?