FortiMail
FortiMail provides advanced, multi-layer protection against the full spectrum of email-borne threats
Not applicable
Article Id 198290
Article

If antivirus scans occur, but antispam scans do not, verify that white lists are not too permissive and that you have not whitelisted senders in the protected domains. White list entries cause the FortiMail unit to omit antispam scans.

Additionally, verify that either the "Bypass scan on SMTP authentication" option (located under Profile > Antispam) is disabled, or confirm that authenticated SMTP clients have not been compromised and are not a source of spam.