A Content Filtering policy assigned to a Policy Group using LDAP group memberships is not applied to the message, even though the "Find User" identifies the correct policy group. Message Audit Logs (MAL) may show the expected policy group in the list of Untested Verdicts.
Address resolution for email scanning is not enabled in the Directory Data Source. The Directory Data Source Address Resolution must be both enabled and configured for "Email Scanning only" or "Control Center Authorization and Email Scanning".
Edit the DDS source used to provide address resolution and ensure that Email Scanning is enabled.