Antispam Inconsistent & Score Visibility
Microsoft antispam inconsistent filtering is inconsistent. I've had several occurrences over the last few months where the exact same email is sent to a group of users. Some email get caught and go to quarantine and others go through as Not Spam.
In troubleshooting with Microsoft, the first occurrence could not find any difference. In the second occurrence, Microsoft said that it was most likely the Source IP address was blocked for one message and not for the other address. OR it had to do with what email server received the email at Microsoft but was on a different anti-spam definition file. Either way, we have no ability to know why one email was rated SCL=6 for spam while another email with the exact same header information for another user gets a SCL=0.
MY REQUEST: Microsoft needs to provide better visibility into how/why their antispam scores were applied. i.e. if an IP address is on a Realtime Blackhole List...state that and how it affected the score. … if a link inside an email caused the score to raise, state that and how it affected the score.
Many other antispam systems have this ability and it greatly helps Email administrators troubleshoot the system to adjust their Antispam policies better. It also GREATLY helps to explain to leadership why one email got through the system when others did not.