How to tag spam mails in iron port and foreword to junk folder?

[Raj Kumar]

How to tag spam mails in iron port and foreword to junk folder? 

[David Miller · Accepted solution]

Best thing to do with spam mails that ironport positively identifies as spam is to drop or quarantine on box if you must as it will nearly always be right.  For suspect spam you can quarantine on box or forward to the recipient with a modified subject header e.g. [suspect spam] and use that with an outlook rule to put it in the user's junk mail folder.  You can also use outbreak filter to modify the urls inside suspect spam to provide added protection.

[Mathew Huynh]

As Dave has suggested.

Positively identified spam recommended actions would be to Drop it -- if you would like to review these emails and manually remove it, then send it to the spam quarantine 

This can be changed under the GUI > Mail Policies > Click on Incoming or Outgoing mail Policies and edit the anti-spam settings per policy if needed.

Ideally suspected spam to be sent to the quarantine for further review.

If you do not wish to use a quarantine or drop the email, you can prepend the email as Dave also suggested and send it to the end recipient under [Suspected Spam] <Subject> for the end user to determine it.

However the IronPort will not make specific rules to deliver it to the MUA's Junk mail folder.

This type of setup is normally down to each specific end user to work with on their own MUA  (outlook, lotus, safari etc.)

I hope this helps.

Regards,

Matthew Huynh