Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 17 subscribers
  • Views 3393 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

getting spam messages even it should be quarantine and email are being processed for more that 12 min

Shay Hanya

Hi

One of our customers, in different times, got the same email. the mail was categorized as spam but still arrived in inbox.  I initiated a clawback to all messages.

The policy says that if it spam at any level quarantine the message.

case number: 07228653

another problem a message is being processed more than 12 min and then move to the inbox.

case number: 07232378

Someone have that problems?

Shay



This thread was automatically locked due to age.
  • 0

    Hello Shay,

    Thank you for contacting the Sophos Community.

    For Case ID 07228653 the email was detected as Suspected L3, but the aggressiveness of catch in your policy was set as L2, which led to the email pass; it seems you have mentioned in the same case that Clawback is not working when trying to call back those emails, this is will be investigated further. (Most likely a new case might be open for this one).

    For Case ID 07232378 the engineer has replied to your last email, asking for further clarification, as this seems to affect only one sender and one recipient. 

    We will continue to monitor the case for further developments.

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • 0 in reply to emmosophos

    Hello Community,

    Just to close the loop on this thread.

    For the emails with a delay, in some corner cases, the delay may occur when the product sees a new domain/IP; this resolves itself as the Historian continues to learn about the IP/Domain sending legitimate emails.

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Unfiltered HTML