cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
GGiorgakis
Nickel

Thread Emulation block email as a malicious but we need to release it (false positive)?

Is there any way to release an email which was blocked by TE?

0 Kudos
1 Reply
Employee+
Employee+

Re: Thread Emulation block email as a malicious but we need to release it (false positive)?

Hi,
Are you using MTA?
Do you use the "Block the e-mail" option in the policy?

If so, then the mail was dropped.

If you also use Threat Extraction it might have been saved in the Threat Extraction quarantine.

If you want to be able to release mails as FP there are ways to do that. For example, by not blocking e-mails but rather tagging them and sending them to quarantine (or just a different, separate folder) on the exchange side.

HTH
0 Kudos