This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Delay Queue Execution Seems Poor The Last Couple Of Months.

Anyone else having problems with delay queue execution? The delay queue will fill up with 100's emails that are all the same and it's obvious snowshoe spam. This happens several times a day in spurts but on the second scan these emails are not determined as Spam and are sent to the users. This has caused a lot of complaints from my users and upper management.  I increased the minimum delay time to 60 minutes so that there is more time for Sophos definitions to be updated before the second scan takes place but all the Spam Mail still gets delivered?? Not sure why Sophos isn't catching these very obvious Spam attacks. So now I am having to manually check the delay queue every 30-45 minutes so that I can manually delete out all the spam in the delay queue before it gets delivered.  It would be nice that since Sophos's solution is not doing it's job that Sophos could increase the minimum allowable time beyond 60 minutes so I would not have to check it so often.



This thread was automatically locked due to age.
Parents
  • Hello,

    I would suggest you to submit few samples to Sophos labs for analysis using below link :

    https://www.sophos.com/en-us/support/knowledgebase/23113.aspx

    Also, since you mentioned that there are hundreds of emails in delay queue, do check the delay queue size limit, If the delay queue becomes full, the emails with the earliest release time will be released earlier.

    Regards,

    Aiman Ansari | Network & Security Engineer 

  • For the first couple of months I submitted each and every email daily but it didn't help.  They still continue to come in daily.   Also the delay queue is not filling up and forcing emails out of the queue. I have kept a close eye on the queue size. The min time was 10 minutes and now that I have changed it to the max 60 minutes it gives me time to delete them before the re scan 60 minutes later, nothing is being released at this point.

Reply
  • For the first couple of months I submitted each and every email daily but it didn't help.  They still continue to come in daily.   Also the delay queue is not filling up and forcing emails out of the queue. I have kept a close eye on the queue size. The min time was 10 minutes and now that I have changed it to the max 60 minutes it gives me time to delete them before the re scan 60 minutes later, nothing is being released at this point.

Children
No Data