Verdict Chart and Last State Verdicts

A Verdict Chart displays information of the various possible verdicts triggered by each engine of the email security appliance.

Note

Verdict charts for AsyncOS prior to 12.0 will not be displayed and last state verdicts is displayed as "Last State Not Available".

The following table shows the various verdicts of each engine:

Verdict Charts

Connection Behavior

Message Filter

Anti-Spam

Anti-Virus

AMP

Graymail

Content Filter

Outbreak Filter

DLP

Not Applicable

Accepted

Relayed

Not Evaluated

Match

No Match

Not Evaluated

Negative

Suspect

Bulk Mail

Social Mail

Marketing Mail

Positive

Not Evaluated

Negative

Repaired

Encrypted

Unscanable

Positive

Not Evaluated

Clean

FA Pending

Unknown

Skipped

Malicious

Unscannable

Low Risk

Not Evaluated

Negative

Positive

Not Evaluated

Match

No Match

Not Evaluated

Match

No Match

Not Evaluated

No Trigger

Violation

No Violation

The Last State verdict of the message determines the final verdict that is triggered after all the possible verdicts of each of the engine in your appliance.

Following are some of the last state verdicts:

  • Delivered: When a message is delivered.

  • Dropped: When a message is dropped.

  • Aborted: When a message is aborted. (Example: Due to Mail Policy restrictions)

  • Bounced: When a message is bounced back.

  • Splintered: When the MID of a message is split into multiple MIDs having multiple final states.

  • Quarantined: When a message is quarantined by engines.

  • Queued: When a message is queued for delivery either to end recipient or to an off-box Spam quarantine or Centralized Policy, Virus or Outbreak quarantine.

  • Processing: When a message is not completely processed by all the engines; or when a message is waiting in a queue of a particular engine.

  • Last State Not Available: When last state of message cannot be retrieved. (Example: When message is still being processed by the engine and has not reached any final state.