Linda,
Thanks for the reply. We have not used barracuda before but that sounds like what we are looking for. Our old system Esoft Instagate had area you could get to in your browser where anything that was flagged as SPAM-LOW / SPAM-MED would sit in a queue waiting for us to go through. We could then preview the email in the browser much like using webmail. At that point we could verify that something was spam or release it as a valid email.
We have come up with the workaround of using a specific account to forward all SPAM-LOW / SPAM-MED tagged emails. We then get into that account a few times a day to release any valid emails. The issue with this is we also have a SPAM-TERMS rule that has any terms we deem spammy (ONLINE DATING, BITCOIN, SINGLES, etc). This works good but anytime we have a message that is caught by the spam terms that is actually legitimate we have to disable the rule, release the email, then re-enable the rule. If that makes sense.
A little background we are an automobile dealership so we do deal with terms that are sometimes inherently spammy like low interest loans, savings, limited time, etc so we do get our share of false positives.