Spam
Spam detection is performed against the signature scanning engine. Messages detected as spam by the system can have a variety of actions performed on them. Spam messages are not required to be blocked or sent to quarantine, they can simply be flagged and sent along, or flagged and have their subject re-written. However, the default action is to block and quarantine to keep mailboxes free.
When spam detection is enabled, items classified as spam can fall into three different categories: Confirmed spam, Bulk spam, and Valid bulk mail. Confirmed spam are mail that is known to be be spam through pattern detection. Bulk items are mails that may be spam due to it being seen in bulk. Valid bulk mail are items such as newsletters, notifications, etc that could potentially be considered spam.