Video Screencast Help
Give us your opinion and win with Symantec! Please help us by taking this survey to tell us about your experience with Symantec Connect, so that we can continue to grow and improve.  Take the survey.

Spam mails also get matched in Content Filtering and get archived

Created: 10 May 2012 • Updated: 12 May 2012 | 2 comments
This issue has been solved. See solution.

Spam mails get detected right and they do get deleted as per policy but the same mail also get into Content Filtering violation filer!

What happens is that it matches Archive Policy of Content Filter and hence that 'spam' mail is also archived!

Any idea what went wrong ? Is it designed so or did I configure it wrong?

We have to archive all messages but why should a spam/virus mail which gets deleted too get archived?

Comments 2 CommentsJump to latest comment

nathan_bergstrom's picture


The Symantec Messaging Gateway is a multi-verdict engine.  The exception to the rule is the IP reputation which stops the connection at the front door.  Typically the rule that has the most heavy action will take precidence over the other rules actions, as example, a delete is heavier than a quarantine.  So depending on the content rules that were created I would expect to see multi-verdicts for a single message.

TSE-JDavis's picture

We have provided a solution for this in the product. You will want to edit your current spam policy under Spam and add the action labelled "Bypass content filtering policy" along with the existing action. This will prevent us from scanning the message for content filtering once we have determined it is a spam message.