Hello, Acleri.
I bet this is because you're likely facing a spoofing issue.
The ESA does not have any capability to compare headers (for example: reply-to or from headers), nevertheless, there is already an enhancement request we have placed in orde...
Hello, Greg.
As of version 7.5.1, the Cisco Email Security Plug-in comes with a feature to track the messages reported as spam.
Tracking of Spam Reports (7.5.1):
You can configure tracking the reported messages marked as spam, virus, phish, or mar...
Hello, Rab.
It is quite common to see the header FROM spoofed rather than the envelope sender on emails.
This is because the header FROM is displayed (not the envelope sender) Mail Clients (MS Outlook, Thunderbird, AppleMail).
Under: Mail Policies ...