Check Mail Policies/Incoming Policies
Check the policies that apply to the inbound mail and make sure Enable Marketing Email Scanning is off.
.
HAT lets them talk to your Ironport and hand you a piece of mail, the security stuff still gets to look at the mail...