Messaging Gateway

Spam mails get detected right and they do get deleted as per policy but the same mail also get into Content Filtering violation filer!

What happens is that it matches Archive Policy of Content Filter and hence that 'spam' mail is also archived!

Any idea what went wrong ? Is it designed so or did I configure it wrong?

We have to archive all messages but why should a spam/virus mail which gets deleted too get archived?

Greetings,

The Symantec Messaging Gateway is a multi-verdict engine.  The exception to the rule is the IP reputation which stops the connection at the front door.  Typically the rule that has the most heavy action will take precidence over the other rules actions, as example, a delete is heavier than a quarantine.  So depending on the content rules that were created I would expect to see multi-verdicts for a single message.

We have provided a solution for this in the product. You will want to edit your current spam policy under Spam and add the action labelled "Bypass content filtering policy" along with the existing action. This will prevent us from scanning the message for content filtering once we have determined it is a spam message.