cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
238
Views
0
Helpful
2
Replies

Bounce or DROP action recommended for "Positively-Identified Spam" ?

vinayp
Level 1
Level 1

What is the recommendation Action for "Positively-Identified Spam" between Bounce and Drop ? Thanks.

2 Replies 2

prrprasa
Cisco Employee
Cisco Employee

Hi Vinay,

With setting the action as drop, there would be no information or notification sent to the sender unless a filter is created, the email would be dropped and we will not be able to retrieve the same.
However with bounce action, required sender or alternate email address could be notified.
As per best practices the recommended action for the emails identified as positive spam or "Positively-Identified Spam" would be to quarantine. The reason being, in cases of any false positives you would have an option to review the samples. 

Typically the recommendation is to quarantine... for all that the filters are good, they still get it wrong sometimes. So a quarantine, where you can track down email that didn't get delivered is often the safest option.


________________________________

This email is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law. If the reader of this email is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited.
If you have received this communication in error, please immediately notify us by telephone and return the original message to us at the listed email address.
Thank You.