Security Services
Configuring Spam Filter
Cisco ISA500 Series Integrated Security Appliances Administration Guide 320
7
•Action when Suspect Spam Detected: Choose Blo ck Email to block the
email, or choose Tag Email with [Suspect Spam] to get the email tagged
with [Suspect Spam].
•Reputation Threshold: Specify the block sensitivity as Low, Medium, or
High, or as a numerical threshold (Custom).
-Low: Blocks less spam with lowest risk of false positives. The threshold
value for spam is -4 and the threshold value for suspected spam is -2.
-Medium: Blocks more spam with moderate risk of false positives. The
threshold value for spam is -3 and the threshold value for suspected
spam is -1.
-High: Blocks most spam with increased risk of false positives. The
threshold value for spam is -2 and the threshold value for suspected
spam is -0.5.
-Custom: Manually set the spam reputation threshold. When the Custom
radio button is selected, choose the threshold values for spam and
suspected spam. The allowable values for the threshold are integers
from -10 to -1 and the value -0.5.
STEP 4 In the Allowed Senders area, you can specify the email sender exceptions against
your Spam Filter settings. Traffic from the specified hostnames or IP addresses
will not be examined by Spam Filter.
• To add an exception, enter the hostname or IP address of the sender in the
Hostname/IP Address field and click Add.
• To remove an exception, select it from the list of Allowed Senders and click
Remove.
STEP 5 In the Service Outage area, choose one of the following actions when Spam Filter
is unavailable:
•Do Not Accept Emails when spam reputation services are not available:
All emails are delayed until Spam Filter is available.
•Accept Emails even when spam reputation services are not available: All
emails are delivered without checking for spam.
STEP 6 Click Save to apply your settings.