User´s mails sometimes quarantined as SPAM

Question

Hi, 
 
 one of our client&acute;s user upon sending a mail with a PDF attachment (German Order Confirmation document) sometimes receives the below message: 
 
 "Your message to the following recipients was quarantined: 
 
 <xyz@xyz.info>, quarantine reason: Spam () 
 
 Please contact your IT administrator for further assistance." 
 
 What could be the reason for this? 
 Where can I find further information in the UTM Controll Center on why a particular mail has been rejected as SPAM?

BAlfson · Accepted Answer

Hallo Julius - welcome to the UTM Community! 
 As others said above, UTM uses a third-party product. CommTouch was acquired by McAfee and the tool in the UTM is still ctasd (CommTouch anti spam daemon) which calculates a signature for each email accepted by the SMTP Proxy and then queries the McAfee cloud service to determine if the signature is close/identical to others that are confirmed spam, bulk/spam or not spam. Their algorithms keep changing based on feedback provided by customers. 
 Instead of simply deleting the emails from the Quarantine, the admin should have selected 'Release and report as false positive'. In that way, you can "train" their tool to handle your mail correctly. 
 Cheers - Bob

BAlfson · Answer

Hi Julus, 
 You could create an Exception for Antispam for just that individual's email address. I'd want to be certain that the domain had an SPF record in its authoritative name server though. 
 Cheers - Bob