If you configure Symantec Brightmail Gateway to route email to Symantec Network Prevent, email is typically routed in the following order:
Symantec Network Prevent passes messages back to Symantec Brightmail Gateway on port 25 (default) unless the Symantec Network Prevent rejects the message. In that case, Symantec Brightmail Gateway returns the message back to the sender with an SMTP 5xx failure response code. The message includes the text that you specify.
Symantec Brightmail Gateway processes messages as configured. Symantec Brightmail Gateway can process messages based on subject or header markup of messages by Symantec Network Prevent. Redirected messages are delivered to the alternate recipient or recipients.
If Symantec Network Prevent is configured in reflecting mode, then each Symantec Network Prevent server returns each message to the Scanner from which it received the message.
If Symantec Network Prevent is configured in forwarding mode, then Symantec Network Prevent servers pass messages to the next destination.