Hi popowich,
I see the defaults are way too high for you as well. Btw, do you treat quarantine mail any differently than suspect (e.g. have a slow queue for those) or do you pass it to the same AA layer as the suspect bunch?
Also, do you see much false positives on trusted queue?
Thanks...