In some cases, when Marketing, Newsletter, or Suspicious URL policies were enabled, they did not trigger as expected. The same or a similar message may be caught at one time and not caught at another, though when investigated further, the rules were in place to take action on the message.
This issue has been addressed in Symantec Messaging Gateway 10.5.3. Please update at your earliest convenience.