Symptoms

Consider the following scenario:

  • You install Microsoft Forefront Security for Exchange Server (FSE) or Microsoft Forefront Protection 2010 for Exchange Server (FPE) and then update FSE or FPE to the most recent version.

  • A user receives a spam email message.

In this scenario, FPE or FSE may report an incorrect spam confidence level (SCL) rating.

Cause

This issue can occur if the Exchange anti-spam filter agents are enabled on a computer that is running Microsoft Exchange Server and has the HUB Transport or Edge server role. By default, Exchange stamps the SCL rating if the Exchange anti-spam filter agents are enabled. However, if the Exchange anti-spam filter agents are not updated to the most recent versions, the SCL ratings may be incorrect.

Resolution

To resolve this issue, disable the Exchange anti-spam filter agents on the computer that is running Exchange Server. After you disable the Exchange anti-spam filter agents, you should verify that policies and exclusions are configured correctly in FPE or FSE.

More Information

To verify that the Exchange anti-spam filter agents are enabled, run the following cmdlet in the Exchange Management Shell (EMS):

Get-TransportAgent

References

For more information about the Get-TransportAgent cmdlet, go to the following Microsoft TechNet website:

Get-TransportAgent

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.