Product Troubleshooting WithSecure Elements Endpoint Protection

EPP for Servers: "WSResourceMonitorPlugin: An attempt to open the file C:\Windows\Sysnative\sru\SRUDB.dat" event log is being output from ESENT (Event ID 489)
Wrong username or password error when trying to login to my account in Elements Security Center portal
Does WithSecure Elements Endpoint Protection for MAC support macOS version 15 Sequoia ?
Error: 'An error has occurred while adding an administrator.' when creating a new administrator in Elements Security Center
Elements Mobile Protection received push notification "Test push msg android" "Hello Android MP in P3"
Can WithSecure endpoint protection clients detect malware for Linux?
How to reset the host UID of a WithSecure Elements Agent device?
Is it expected to have both F-Secure and WithSecure services running for Elements Agent?
How do I change the Alerting configuration settings for Elements Endpoint Protection portal infections email alerting?
How do I change the Alerting configuration settings for Elements Endpoint Protection portal infections email alerting?

Recipients are not listed for quarantined attachments that are blocked in real-time

Recipients are not listed for quarantined attachments that are blocked in real-time

Symptoms

Recipients are not listed for quarantined attachments that are blocked in real-time.

Diagnosis

If malicious or disallowed attachments are blocked during real-time scanning in the Exchange store, they are listed in the Quarantine Query without the name of the corresponding recipient mailbox where they have been blocked.

Solution

The information about the mailbox, which contains the malicious or disallowed attachment, can be found in the product alerts.