we are having the problem that Sophos Central does not block obvious spam.
i also added some email adresses to the vip list but i'm unable to add distribution list adresses to the vip list. One of our distribution list adress is most affect by this.
So any advice for this?
Try to test a Gtube String.
A Email with this string in the body should get detected. If not, some configuration is not correct in your setup.
Adding to what Luca mentioned, you also submit the sample for analysis by following this KB.