Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Geomix7
Collaborator

Thread Emulation block email as a malicious but we need to release it (false positive)?

Is there any way to release an email which was blocked by TE?

0 Kudos
1 Reply
TP_Master
Employee
Employee

Hi,
Are you using MTA?
Do you use the "Block the e-mail" option in the policy?

If so, then the mail was dropped.

If you also use Threat Extraction it might have been saved in the Threat Extraction quarantine.

If you want to be able to release mails as FP there are ways to do that. For example, by not blocking e-mails but rather tagging them and sending them to quarantine (or just a different, separate folder) on the exchange side.

HTH
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events