Security Engine and message decisions

Security screen

From Admin → Security, review Security Engine decisions for processed messages. An entry may include message identifier, domain, decision, reason and additional indicators according to enabled scanners.

Typical outcomes

• allow/clean — no blocking reason;
• spam — classified as unwanted;
• quarantine — held for review;
• reject/fail — denied by policy or technical validation.

Analysis

Correlate the security decision with Mail Flow trace and user Quarantine. A message may be technically accepted but held before Inbox delivery.

Policy changes

Do not disable a scanner because of one false positive. First collect headers, reason, sender or domain and recurrence. Apply a narrow correction or allowlist only to a validated object and monitor subsequent messages.