How do I audit positvely-identified or suspect spam, marketing email for false positives?

Available Languages

Updated:July 22, 2014

Document ID:118024

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Introduction

Related Information

Introduction

This document describes how to audit positvely-identified or suspect spam, marketing email for false positives.

How do I audit positvely-identified or suspect spam, marketing email for false positives?

The Cisco IronPort Email Appliance (ESA) provides several options that allow you to store messages and examine for false positive anti-spam verdicts.

In the GUI, Mail Policies > Incoming Mail Policies or Outgoing Mail Policies, choosing the Anti-Spam settings for the mail policy, you can choose to send positvely-identified spam, suspect spam, or marketing email to an alternate host, or to send the IronPort Spam Quarantine (ISQ).

Using an alternate host address can allow an administrator to review positvely-identified spam, suspect spam, or marketing email and report any false positives.

The ISQ allows both administrators and end recipients to review positvely-identified spam, suspect spam, or marketing email before choosing to delete or release them.

If false positives are detected, please report those to ham@access.ironport.com.