• If possible use, a FortiMail unit. The antispam engines are more robust.

• Use fast DNS servers.

• Use specific security profiles for the rule that will use antispam.

• DNS checks may cause false positive with HELO DNS lookup.

• Content analysis (banned words) may impose performance overhead.