SMTP Anti-Spam, Mail dropped, can i recover mail or find reason for drop?

Hi juergenb52 : Here based on this Log Viewer snippet reason for this mail drop is "Mail detected as Spam" by Anti Spam engine. If you do not want to drop an email then you may set action as in "Quarantine" on respected SMTP rule. Action by Anti spam engine is based on your define action on your configured rule. Here for policy name "domains" action is set to drop and due to that this rule is dropping mail if criteria or condition is getting matched. 

Also as far as I know drop mail can not be recovered. 

Hi juergenb52 : Here based on this Log Viewer snippet reason for this mail drop is "Mail detected as Spam" by Anti Spam engine. If you do not want to drop an email then you may set action as in "Quarantine" on respected SMTP rule. Action by Anti spam engine is based on your define action on your configured rule. Here for policy name "domains" action is set to drop and due to that this rule is dropping mail if criteria or condition is getting matched. 

Also as far as I know drop mail can not be recovered. 

Thanks Vishal,

is there any way to find the keywords or whatever triggered the SPAM Reason?

Hi juergenb52 :  You may check smtpd_main.log to see if that gives more reason or clue on that side.

https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/LogFileDetails.html

The smtpd_main and the smtpd_reject logs have no information for the dropped SPAM Mail.
Is there any other log i can review (not in /logs/* 

Hi juergenb52,

You will not get the exact keyword or details based on which mail is detected as spam. If you think, the mail is genuine and should not be considered spam, you can report a false positive. For Sophos XG Firewall, you need to raise a support ticket.
For other products, refer to below link.
support.sophos.com/.../KB-000033422