After upgrading the Symantec Mail Security for Microsoft Exchange from 6.x to 7.0, Premium Antispam is not working and spam is getting through.
The certificate used to download new rulesets (cert.pem) was not properly upgraded during the upgrade process.
Disable and re-enable Premium Antispam to generate a new cert.pem file.
To disable and re-enable Premium Antispam: