There has been some major confusion on the setting under advanced options in Forefront Protection for exchange called “Rescan messages already scanned by Forefront Online protection for Exchange”
By default it looks like this
Now this looks like by default we do not scan messages if we see they came through FOPE.
That’s not true. By default its unchecked so everything is scanned.
If you want to skip scanning for spam or viruses you set it up like this
If you wanted to only scan for viruses and skip scanning for spam you would check rescan messages already virus scanned.
Note: By default we mark messages that are spam 8 or 9, cleaned messages are –1
We enable spam scanning for exchange when we install but, with an scl rating of “–1” or 8/9 exchange would not be scanning these messages for spam.
Disabling spam scanning by doing this will allow exchange anti-spam agents to scan as well.
We have seen customers disable this and continue to see spam being caught, but by the exchange anti-spam agents and not ours.
You can disable this in exchange if it is causing you an issue.