Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Collaborator

Thread Emulation block email as a malicious but we need to release it (false positive)?

Is there any way to release an email which was blocked by TE?

0 Kudos
1 Reply
Highlighted
Employee+
Employee+

Hi,
Are you using MTA?
Do you use the "Block the e-mail" option in the policy?

If so, then the mail was dropped.

If you also use Threat Extraction it might have been saved in the Threat Extraction quarantine.

If you want to be able to release mails as FP there are ways to do that. For example, by not blocking e-mails but rather tagging them and sending them to quarantine (or just a different, separate folder) on the exchange side.

HTH
0 Kudos