Step-by-step information on what happens to an email that is sent within the organization and how TSME scans it, to determine if the email is clean or infected.
The end-user sends an email to an internal user, using the email client.
For Exchange Server SE, 2016, and 2019, the emails are directed to the Transport queue from the Outbox folder.
If there is detection, it's replaced or deleted as per the product configuration and if replaced it is submitted to Transport queue.
TSME Transport Agent (McAfeeTxRoutingAgent) scans the email for File filtering, Content scanning, then Anti-virus scanning.
If there is detection, it is dropped or replaced and appropriately returned to the SMTP stack.
If the email is clean, it is returned to SMTP stack for further routing.
The Exchange Mailbox server receives the email.