Cisco Cisco Email Security Appliance C160 Mode D'Emploi

If you use LDAP authentication, you can choose not to send notifications to mailing list aliases. Or, if 
you choose to send spam notifications to mailing list aliases, you can prevent some occurrences of 
multiple notifications. See 

Users who access the spam quarantine by clicking a link in a notification will not see quarantined 
messages for any other aliases that the end-user may have, unless the appliance is using a spam 
quarantine alias consolidation query for email notifications. If the notification was sent to a distribution 
list that is expanded after processing by the appliance, then multiple recipients may have access to the 
same quarantine for that list. 

This means that all subscribers to a mailing list will receive the notification and can log in to the 
quarantine to release or delete messages. In this case, end users visiting the quarantine to view messages 
mentioned in a notification may find that those messages have already been deleted by other users. 

If you do not use LDAP and you do not want your end users to receive multiple email notifications, 
consider disabling notifications and instead allow end users to access the quarantine directly and 
authenticate via LDAP or POP/IMAP. 

You can test notifications by configuring a testing mail policy, and having spam quarantined for just a 
single user. Then, configure the spam quarantine notification settings: Select the Enable Spam 
Notification checkbox and do not select Enable End-User Quarantine Access. Then only the 
administrator configured in the Deliver Bounced Messages To field is notified of new spam in the 
quarantine. 

A user receives multiple spam notifications for a single message. 

Possible causes: 

The user has multiple email addresses and the spam message was sent to more than one of those 
addresses. 

mary@example.com

dev@example.com

qa@example.com

pm@example.com

4

joe@example.com, 
admin@example.com

hr@example.com

3