quarantine email by word in subject

[chipperjonesrules]

we are using Fortinet as firewall system, it's spam features are attaching [spam] to the subject line of any email it considers spam.

what is the best way to quarantine those emails using the built in exchange 2007 spam options?
is it custom words filtering, or creating a transport rule?

 

[ShackDaddy]

When you say "quarantine" do you mean keep it from going to the user at all, or just to move the mail automatically into the Outlook Junk Mail folder? If it's the latter, you could use a transport rule to look for the phrase [Spam] and then set the SCL of the message to 9. Then you could separately use PowerShell to enable Junk Mail filtering for all users and set the threshold to something like 7. In every case the mail marked by the Fortigate would then go into the Junkmail folder in Outlook.

Dave Shackelford
ThirdTier.net
TrainSignal.com