12-08-2005 05:35 PM
We are beta testing the efficacy of IronPort antispam with a few users. Is there anywhere I can get more information or advice on how to adjust the threshhold parameters?
matthew
12-08-2005 11:33 PM
Are you finding it better or less effective than Brightmail?
The Brightmail BLOC is starting to lose the battle against the smarter spammers - eg picture only spams and the HTML table ones.
(sorry I didn't answer your question)
12-09-2005 04:17 AM
Matt, my recommendation is to start with the default settings of 90 for spam positive and 50 for suspected spam.
The spam threshold of 90 is calibrated to have a comparable false-positive rate to Brightmail, so most customers using IronPort Anti-Spam today are comfortable just dropping messages with a score > 90.
The suspected spam threshold is slightly more aggressive than Brightmail, so I would recommend keeping it at 50 but taking a more benign action on the messages like tagging the subject & delivering. If you want to be on the safe side, you can also start testing with a suspected spam threshold of 75.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide