Antispam

Administrator Help | Forcepoint Email Security | Version 8.5.x

The antispam analysis function checks email for various characteristics of spam. If the email hybrid service is enabled and configured, it performs antispam analysis as well (Email Security Hybrid module is required). If email hybrid service is not configured or available, a combination of other on-premises tools is used for effective antispam analysis. Configure the antispam filter on the page Main > Policy Management > Filters > Add (or Edit) Filter.

The email hybrid service analyzes incoming email and blocks any message that it recognizes as spam. Mail that the hybrid service allows into the system for processing includes a header that contains an analysis result score. The email system uses this score to determine how to handle the message. If that score exceeds a specified spam threshold, the email system treats the message as spam and handles it according to applicable policy. In this case, the on-premises email security software does not perform its own, separate antispam analysis.

Configure antispam filter analysis

(If applicable) Enable hybrid service spam scoring; in the box Email Hybrid Service analysis, mark the check box Use email hybrid service analysis with a threshold score for spam of.

Select a spam score from the pull-down menu (floating point number between 0 and 20; default is 6).

This option only displays when the Email Security Hybrid module is configured and running.

From the section Tools, mark the check boxes for one or all of the following tools:

Digital Fingerprinting analysis

When enabled, digital fingerprint analysis checks message content for any digital fingerprint of known spam.

LexiRules analysis

When enabled, the LexiRules tool analyzes message content for word patterns commonly found in spam.

Heuristics analysis

When enabled, heuristics analysis checks the message header or content for spam characteristics.

The on-premises software performs a complete antispam examination using the selected tools when the Email Security Hybrid module is not enabled.

From the section Heuristics Analysis, set the heuristics analysis sensitivity level, from Lowest to Highest.

The default is Medium.

(Optional) Mark the check box Bypass antispam analysis if message size exceeds.

In the text field, enter a message size in KB (default is 3072).

Selection indicates to use message size to determine whether antispam analysis is bypassed.

Configure additional filter settings and click OK.

The antispam filter settings are saved.