-
Spam email getting through even if Elements Collaboration Protection is in use
Issue: Why is spam / bulk / advertising / phishing email getting through even if Elements Collaboration Protection is in use? Shouldn't spam email be filtered by the spam filter? Resolution: Elements Collaboration Protection does not include a spam filter. Microsoft Office 365 has its own anti-spam policies, of which you…
-
What is "suspicious hidden inbox rules" option on inbox rule scanning feature in Collaboration Protection.
Issue: What is "suspicious hidden inbox rules" option on inbox rule scanning feature in Collaboration Protection. Resolution: Detect suspicious inbox rule where attacker tries to move content between hidden folders to remain undetected. Attackers use these kinds of rules to manipulate the original mailbox user, remain…
-
Elements Collaboration Protection: Breach detected time is recorded differently with actual occurred time in portal
Issue: Breach detected time is recorded differently with actual occurred time in portal. Resolution: Breach occurred shows when a breach happened. Breach detected is the date when our solution received an information about the breach. Depending on the case, it can take some time for breach database to realize they were…
-
What time is the scheduled report generated in Collaboration Protection?
Issue: What time is the scheduled report generated in Collaboration Protection? Resolution: Report generation starts at 3 AM (according to the timezone selected in report task) and takes up to a few minutes. Generation frequency depends on a frequency selected in report tasks daily: every day weekly: every Monday monthly:…
-
The detection made from an old mail in Elements Collaboration Protection
Issue: Collaboration Protection sent URL detection from an mail received over 2 month ago. Why the delay has occurred?Resolution: If the detection found except neither Inbox nor Sent, it might cause when the mail was moved directory. The suspicious emails are automatically scanned depending on the action defined in the…
-
How can admin recover or release quarantined emails directly preventing the email from being sent to the original recipient?
Issue: Normally after releasing quarantined email, the email will be re-sent to the original recipient. If quarantined file or URL in Exchange needs to be investigated, admin needs to release the email first and ask the recipient to forward the email to admin after the email is released. It's a bit risky for normal user…
-
Can we integrate Microsoft Sentinel (SIEM) with Elements Collaboration Protection?
Issue: Can we integrate Microsoft Sentinel (SIEM) with Elements Collaboration Protection? Resolution: Integration of Microsoft Sentinel with Elements Collaboration Protection is not possible. Article no: 000043757
-
Why users/recipients who is not aware of the quarantined email is not been notified on Elements Collaboration Protection?
Issue: Let's say person A (which uses Microsoft 365) sends an email to person B on any other server. The used e-mail address is wrong or no longer existent and the server sends a response back, that this message couldn’t be delivered. In this notice there is the IP address of the responding server, which gets classified…
-
How does Elements Collaboration Protection subscription usage work?
Issue: How does Elements Collaboration Protection subscription usage work? How does Collaboration Protection delegate the licenses if there are more mailboxes than there are licenses available? Resolution: The license usage for Elements Collaboration Protection is based on the amount of mailboxes that are being protected.…
-
How to configure Cloud Protection for Microsoft 365 compromised accounts to notify administrator only if found compromised?
Issue: When configuring compromised accounts in Cloud Protection for Office 365, I would like only the administrator to receive notification if an account is found compromised. Resolution: You have the option under Compromised accounts in your policies to notify the administrator and the users. These both options are…