Forefront Server Security TechCenter >
Forefront Server Security Forums
>
Antigen
>
SUSPECT Messages being delivered to Inbox
SUSPECT Messages being delivered to Inbox
- Hello,
I've just installed and am testing AntiGen 9 SP2 and am trying to figure out how to automatically get messages that are marked as SUSPECT to immediately go to the users Junk Mail folder even without the Outlook client being open. I have configured the spam filter to tag messages on subject line, MIME and SCL level but only some are being placed into Junk Mail. The ones delivered to the Junk Mail folder also have the SUSPECT prefix in the subject line so I'm wondering why some goto Junk Mail and others don't.
I have IMF installed and configured to send all email over a 7 to the Junk Mail folder. So far all the email with the SUSPECT prefix seem to be junk mail and it would save a lot of frustration if I could somehow quarantine these emails on the server or at least automatically move them to the Junk Mail folder.
I only installed Antigen yesterday and have played around with the settings as well as going through some of the help file. I was hoping someone would be able to give some advice as how to best leverage Antigen to stop these messages appearing in the Inbox.
Also, I was hoping for a solution other than a client side exchange rule to move these messages. Our employees have smart phones with email push and without the Outlook client running the phones would receive all the junk mail until the client started and the rule ran.
Thanks in advance,
Charles
All Replies
- Hi Charles.
I have tried this before when you get an email marked as with the word SPAM and this didnt work for me.
From what i learned from using the Microsoft Antigen this is what what happens:
When email comes in and gets scanned it will run through the spam engine and give a SCL rating for it.
If its rate the SCL less than 7 for you case it will send the email to the inbox and it will bypass the IMF as well.
It will be up to the user to report the spam if you setup an email address for the user to send the spam to Microsoft to resolve this issue.
Once Microsoft receive the email and verify that the specific email was send as spam it the Antigen will be updated according and the user will never receive that email again.
Hope this helps.
Raymond- Proposed As Answer byRKYMO88 Tuesday, August 25, 2009 1:35 PM
- For an even more detailed explanation, see this blog: How do Exchange IMF and Antigen Advanced Spam Manager work together?
Kind Regards, Andy Day | CSS Security, Sr. Support Engineer (Antigen/Forefront Server Security)
