What's one to do with SPAM that gets through? Using hosted services, you send the headers to the provider and that's it. With an on-premise solution such as Cisco...what happens now?
First thing to do is to verify if the blocker did not classified it as spam or if the mail did not get scanned because of size limitation. You can do this by using grep in the cli or using message tracking in the gui and finding the MID for that piece of mail in the mail_logs. IF the spam engine said the mail was negative and was sent through but is really consider spam you can send that email in a attachment form to spam@access.ironport.com. It is important to place that mail in an attachment and not just forward it so the cisco/ironport team can look at the header info for that piece of mail you received. Hope this helps.
Brian
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
