Virus cleaning on SMG

Hi,

Malware policies has a policy which says:

virus: clean message

What happens when the "cleaning" fails? Is the message delivered to the user?

We had this policy activated, and all trojan infected .doc files would get past it to the users!

Then there's another policy:

virus: quarantine

The TAC kept telling me that either cleaning OR quarantine can be used but both can't be done at once. In this policy I have added 2 actions now: clean the message and hold in spam. Why did the policy accept both those actions if it can't be done?

At least now with the second policy I can see a trojan verdict and the emails are being held in spam as per the msg audit logs.