Configuring spam detection


Article ID: 179720


Updated On:


Messaging Gateway




Configuring spam detection

Table: Configure spam detection describes the tasks that you can perform to detect spam and enhance spam detection capabilities.

See About filtering spam.

Table: Configure spam detection



Create and enable email spam policies.

Symantec Brightmail Gateway comes with preconfigured spam policies that are automatically enabled. You can modify these polices or create your own custom policies.

See Default email spam policies.

See Creating email spam policies.

See Modifying spam policies.

Set the suspected spam level.

When Symantec Brightmail Gateway evaluates whether messages are spam, it calculates a spam score from 1 to 100 for each message. This score is based on the results of a wide variety of antispam technologies.

You can define a range of scores from 25 to 89 that constitutes “suspected spam.” Through policies, you can specify different actions for the messages that are identified as suspected spam and messages that are identified as spam.

Symantec recommends that you not adjust the spam threshold until you have some exposure into the filtering patterns at your site. Gradually move the threshold setting down 1 point to 5 points per week until the number of false positives is at an acceptable level.

See Configuring the threshold for suspected spam identification.

Enable the features that provide Symantec with information that helps us create better spam filters.

You can help Symantec create better spam filters when you enable the following features:

Configure the Spam Quarantine.

You can route spam, suspected spam, or both to Spam Quarantine. Users access Spam Quarantine to determine if messages in the quarantine are false positives. If a message is marked as spam or suspected spam, but is legitimate, users can release the messages to their inboxes. Users can notify you of false positives so that you can continue to adjust your spam settings and spam policies accordingly. You can also set up summary notifications to be delivered to users inboxes.

See Before you use Spam Quarantine.

See Configuring Spam Quarantine for administrator-only access.

See Specifying who to notify of false positive messages.

See About configuring the user and distribution list notification digests.

You can configure thresholds to control the space that is allocated for Spam Quarantine.

See Modifying Spam Quarantine thresholds.

See Specifying when and how often Spam Quarantine is expunged.

Monitor reports.

Monitor reports to determine how effective spam policies are. Reports also indicate the volume of spam that your organization receives. This information can help you fine-tune your spam detection settings.

See About working with reports.