Mail Security lets you apply X-headers to the email messages that contain content filtering rule violations or are spam or suspected spam. Symantec Enterprise Vault™ uses the X-headers to search for and retrieve the messages that are archived in the vault. Enterprise Vault is a data warehouse that provides secure, centralized archiving and retrieval of information.

Mail Security provides default X-headers that are commonly used by Enterprise Vault. You can modify the default X-headers, or you can create your own. You can apply up to 25 X-headers for a single violation.

When a message triggers one or more violations and the disposition for any of the violations is to delete the message, no X-headers are applied. For example, a message is identified as spam, and the disposition is to reject the message. No X-header is applied to the message.

Table: How X-headers are applied for multiple violations describes how Mail Security handles multiple content filtering violations based on where the violations occur within the message.

See Processing spam messages

See About creating a content filtering rule