Technical Tip: Classifier is 'Policy Match' in history log

Description

This article explains how legitimate emails are blocked by the default action of the antispam profile with the classifier 'policy match' and how to avoid this.

Scope

FortiMail.

Solution

This is due to the option 'Apply default action without scan upon policy match' being enabled in the antispam profile.

With this option enabled, FortiMail will take the default antispam action right away without applying other antispam filters if the email matches the relevant IP or recipient policy.

It is possible to disable the option 'Apply default action without scan upon policy match' in the antispam profile so the email will be checked by all antispam filters.