I have a Public Folder that is excluded from the virus scan, but some messages are scanned and disinfected before they arrive to the excluded Public Folder. Why?
If you send a message from a MAPI client, the message goes to the Outbox folder before it is sent to the Public Folder. The message is scanned when it is in the Outbox folder according to this mailbox processing settings. When the message arrives in the Public Folder, it is scanned according to the Public Folder processing settings. Thus, messages sent with SMTP are not scanned in excluded Public Folders. A message is not scanned if it comes from a trusted Public Folder or mailbox. If an infected attachment arrives to a trusted Public Folder or mailbox, it passes the virus scanner but it is not disinfected or stopped. The real-time scanner scans messages in the message store only once, so when the infected message is sent from the trusted folder or mailbox to another folder inside the same message store, the real-time scanner does not scan it again. If you want to exclude Public Folders from the real-time scan or use trusted mailboxes, store those messages in a different message store.
