About scanning outgoing mail for spam and phishing content

You can enable or disable scanning of outgoing messages for spam and phishing content using the Anti-Spam module. If messages containing spam or phishing content are being sent from a specific address in your organization, this could mean that a specific computer in your organization is infected.

If the Anti-Spam module detects a message that contains spam or phishing content, the message status takes the value Spam or Phishing. The application deletes the outgoing message containing the detected spam or phishing content while saving a copy of the outgoing message in Backup.

The Sender type field for outgoing messages in Backup has the value Internal. To determine whether or not a specific computer distributing spam or phishing content in your organization is infected, you can view the list of copies of outgoing messages in Backup, the list of events in the Windows Event Log, or the list of events in the Kaspersky Security Center Event Log.

The Anti-Spam Module scans outgoing mail messages addressed to external email addresses. The module does not scan messages related to the following categories:

• Messages addressed to internal email addresses.
• Messages whose recipient addresses are on the allowlist.

The Anti-Spam Module determines the message status based on the text content and the message header. In the scan results, the application accounts for only the presence of spam or phishing content in messages to which the Anti-Spam Module assigned the status of Spam or Phishing. In the scan results, the application does not take into account positives in messages with the following statuses:

• Probable spam. The message is probable spam.

  A message that cannot be unambiguously considered spam, but has several spam attributes (e.g., certain types of mailings and advertising messages).

• Formal notification. The message is a formal notification.

  Message that is automatically generated and sent by mail clients or robots (for example, informing about the impossibility to deliver a message, or confirming user registration on a web resource).

• Mass mail. The message is mass mail.

  Mass email messages authorized by the recipients, most often containing advertising messages.

The Reputation Filtering service is not used when scanning outgoing messages for spam and phishing.