Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Configure reputation filtering via the Mail Policies > HAT Overview page. For more information, see 

.

A conservative approach is to block messages with a SenderBase Reputation Score lower than -4.0, 
throttle between -4.0 and -2.0, apply the default policy between -2.0 and +6.0, and apply the trusted 
policy for messages with a score greater than +6.0. Using this approach ensures a near zero false positive 
rate while achieving better system performance. 

A moderate approach is to block messages with a SenderBase Reputation Score lower than -3.0, throttle 
between -3.0 and 0, apply the default policy between 0 and +6.0, and apply the trusted policy for 
messages with a score greater than +6.0. Using this approach ensures a very small false positive rate 
while achieving better system performance (because more mail is shunted away from Anti-Spam 
processing). 

An aggressive approach is to block messages with a SenderBase Reputation Score lower than -2.0, 
throttle between -2.0 and 0.5, apply the default policy between 0 and +4.0, and apply the trusted policy 
for messages with a score greater than +4.0. Using this approach, you might incur some false positives; 
however, this approach maximizes system performance by shunting the most mail away from Anti-Spam 
processing. 

Users are also recommended to assign all messages with a SenderBase Reputation Score greater than 6.0 
to the $TRUSTED policy. 

The steps below outline a phased approach to implementing reputation filtering: 

-10 to -4

-4 to -2

-2 to 7

7 to 10

-10 to -3

-3 to -1

-1 to 6

6 to 10

-10 to -2

-2 to -0.5

-0.5 to 4

4 to 10

Near zero false positives, better performance

Very few false positives, high performance

Some false positives, maximum performance