Question

An administrator on a Cisco Secure Email Gateway is tuning the anti-spam mail policy for the Sales team. Marketing newsletters that users legitimately subscribed to are being flagged as 'suspected spam' (positive spam score below the definite-spam threshold), and users complain they never see these messages to release them. The administrator wants suspected-spam messages held where end users can review and release them individually without administrator involvement, while confirmed spam is still dropped. Which configuration meets this requirement?

Accepted Answer

Set the action for suspected spam to send to the local (or external) spam quarantine and enable end-user quarantine access with spam notifications

Answer

Set the action for suspected spam to deliver the message with a modified subject prefix and enable the spam quarantine only for positively identified spam

Answer

Set both suspected and positive spam to 'drop' and rely on the message tracking log for users to request releases

Answer

Add the newsletter senders to the global HAT SUSPECTLIST sender group so their mail bypasses the anti-spam engine entirely