Chris, Good call! I think that will work I already check X-Ironport-Case-Suspect and X-Ironport-Case-Graymail before I add X-IronPort-Quarantine, so I'll just add X-SLBL-Result to the conditions. Thank you!
I opened a TAC case to ask this question. It's not the answer we were hoping for. Here is their response:The mail passes through the anti-spam engine with the sender marked in the safe-list. Then the mail will pass through the remaining further en...