User Manual Part 2

Using VStream Antispam
488 Check Point Safe@Office User Guide
that the message is spam. If the spam score exceeds a user-configurable threshold
called the “confidence level”, the message can be flagged as spam, or the message can
be deleted altogether.
In addition, VStream Antispam allows you to define a Safe Sender List, which consists of
senders who are exempt from the Block List and Content Based Antispam engines.
The following table provides a comparison of the VStream Antispam engines.
Table 107: Comparison of VStream Antispam Engines
IP Reputation Content Based Antispam and
Block List
Supported
Protocols
Protects mail servers only, and
applies to the SMTP protocol only
Protects both mail servers and mail
clients, and applies to both POP3 and
SMTP protocols
Email Scanning Time
Scans the email before accepting
the connection
Scans the email after accepting the
connection
Detection Method
Examines the sender's IP address Content Based Antispam examines the
email's content, and Block List examines
the email's Sender field.
SMTP Error Message
Does not return an SMTP error
message to the email sender
Returns an SMTP error message to the
email sender
Mail Rejection
Method
Resets the TCP connection Marks the email Subject line, marks the
email header, rejects the email (SMTP
only), or deletes the email (POP3 only)
Server Overload
Protection
Prevents spammers from
overloading gateway and mail
server resources
Does not prevent spammers from
overloading gateway and mail server
resources