Cisco Cisco Email Security Appliance C680 User Guide

Page of 630
Chapter 8      Anti-Spam
8-280
Cisco IronPort AsyncOS 7.1 for Email Configuration Guide
OL-22158-02
Click Yes and define an alternate address. 
For example, you could route messages identified as spam to an administrator’s 
mailbox for subsequent examination. In the case of a multi-recipient message, 
only a single copy is sent to the alternate recipient.
Figure 8-11
IronPort Anti-Spam Settings for a Mail Policy
Positive and Suspect Spam Threshold
When evaluating messages for spam, IronPort Anti-Spam and IronPort Intelligent 
Multi-Scan apply thousands of rules in order to arrive at an overall spam score for 
the message. To maintain its high accuracy, the both anti-spam solutions by 
default set this threshold value quite high. Messages returning a score between 90 
and 100 are considered to be positively identified as spam. You can change the 
positively identified spam threshold to a value between 75 (most aggressive) and