| #

## New Spam Sources

Content Scanning can identify new spam sources in conjunction with Web Reputation Services. After enabling Detect new spam sources, ScanMail performs the following actions after receiving an email message containing a URL:

1. Web Reputation Services determines the reputation score of the URL.
2. ScanMail uses the configured internal gateway MX record or IP address lists to determine the sender IP address of the email message.
3. Email Reputation Services determines the reputation score of the sender IP address.

Content Scanning uses the reputation scores of both the URL contained in the email message and the sender IP address to determine the risk level of the email message.

| ##### Important You must enable Web Reputation Services to detect new spam sources.