getting spam messages even it should be quarantine and email are being processed for more that 12 min

Hello Shay,

Thank you for contacting the Sophos Community.

For Case ID 07228653 the email was detected as Suspected L3, but the aggressiveness of catch in your policy was set as L2, which led to the email pass; it seems you have mentioned in the same case that Clawback is not working when trying to call back those emails, this is will be investigated further. (Most likely a new case might be open for this one).

For Case ID 07232378 the engineer has replied to your last email, asking for further clarification, as this seems to affect only one sender and one recipient. 

We will continue to monitor the case for further developments.

Regards,

Hello Community,

Just to close the loop on this thread.

For the emails with a delay, in some corner cases, the delay may occur when the product sees a new domain/IP; this resolves itself as the Historian continues to learn about the IP/Domain sending legitimate emails.

Regards,