Forefront protection for exchange blocks Outlook block sender functionality and Exchange IMF

  • Article

I would recommend FPE customers do this.

By default when our Anti-spam agent finds something as clean we mark it SCL -1

This can cause a lot of issues with Exchange Blocked senders and it also blocks out any chance of IMF catching something.

This is covered in the Important notes section of our documentation.

  • FPE marks messages that it believes to be legitimate with an SCL rating of -1. As a result, on Exchange Server 2007, the end user blocked senders feature may not be enforced for these messages. If this occurs, as a workaround, you can set the extended option CFAllowBlockedSenders to 'true'. This changes the SCL rating from -1 to 0 and allows Exchange Server 2007 to enforce the end user blocked senders feature.  

The workaround is to change our clean scl stamp to 0

This is done in our power shell.

You need to create a new extended option:

 

PS> New-FseExtendedOption –Name CFAllowBlockedSenders –Value true

PS> Get-FseExtendedOption –Name CFAllowBlockedSenders

should return:

Name Value

------- -------    

CFAllowBlockedSenders True