[Fresh from the Press: Latest KB's] Sophos Email Appliance: Understanding the Delay Queue feature

Hi Community,

When the Delay Queue feature is switched on, the Sophos Email Appliance (SEA) enters an 11-day learning routine to determine the organization’s normal email behavior. It records IP addresses to build a history database and highly-accurate queuing heuristic rules to determine suspicious mail.

The SEA then uses these rules to determine how likely a suspicious email is to be a spam and moves the email to the Delay Queue. Depending on how suspicious the emails are, they are held for 5-60 minutes.The purpose of the Delay Queue is to avoid “Snowshoe Spamming”.

Please check out this KB for more information about Snowshoe Spamming and how to configure the Delay Queue.

Best,

FloSupport | Community Support Engineer