-
How to configure Elements Endpoint Detection and Response alert email ONLY to be sent when severe or high risk level happened?
Issue: Normally, the alert notification email from EDR will be sent when a detection with he risk level at "Severe", "High" and "Medium" has been added to the portal, but is it possible to configure the alert email that ONLY will be notified when "Severe" or "high" risk level has happened? Is it possible to filter the…
-
Email and Server Security- Scanning 'message' by WithSecure Spam Scanner was unsuccessful
Issue: Email and Server Security, the following message keeps occurring: Scanning 'message' by WithSecure Spam Scanner was unsuccessful. Scan result: Scan error: -1073741808 The message can be found in various logs, including the following: - email-scan.log - transportAgent.log Resolution: The error "WithSecure Spam…
-
Elements Vulnerability Management - User's "First and last name showing" as "_Not_SET__ __NOT_SET__" in Elements Portal.
Issue: When adding new users for Elements Vulnerability Management, you can no longer enter first and last names, only the email address. Consequently, when viewing the user information in the Elements Portal, the first and last name shows up as __NOT_SET__ __NOT_SET__ Resolution: It is normal for the username to be shown…
-
Spam email getting through even if Elements Collaboration Protection is in use
Issue: Why is spam / bulk / advertising / phishing email getting through even if Elements Collaboration Protection is in use? Shouldn't spam email be filtered by the spam filter? Resolution: Elements Collaboration Protection does not include a spam filter. Microsoft Office 365 has its own anti-spam policies, of which you…
-
What is "suspicious hidden inbox rules" option on inbox rule scanning feature in Collaboration Protection.
Issue: What is "suspicious hidden inbox rules" option on inbox rule scanning feature in Collaboration Protection. Resolution: Detect suspicious inbox rule where attacker tries to move content between hidden folders to remain undetected. Attackers use these kinds of rules to manipulate the original mailbox user, remain…
-
Elements Collaboration Protection: Breach detected time is recorded differently with actual occurred time in portal
Issue: Breach detected time is recorded differently with actual occurred time in portal. Resolution: Breach occurred shows when a breach happened. Breach detected is the date when our solution received an information about the breach. Depending on the case, it can take some time for breach database to realize they were…
-
What time is the scheduled report generated in Collaboration Protection?
Issue: What time is the scheduled report generated in Collaboration Protection? Resolution: Report generation starts at 3 AM (according to the timezone selected in report task) and takes up to a few minutes. Generation frequency depends on a frequency selected in report tasks daily: every day weekly: every Monday monthly:…
-
The detection made from an old mail in Elements Collaboration Protection
Issue: Collaboration Protection sent URL detection from an mail received over 2 month ago. Why the delay has occurred?Resolution: If the detection found except neither Inbox nor Sent, it might cause when the mail was moved directory. The suspicious emails are automatically scanned depending on the action defined in the…
-
How can admin recover or release quarantined emails directly preventing the email from being sent to the original recipient?
Issue: Normally after releasing quarantined email, the email will be re-sent to the original recipient. If quarantined file or URL in Exchange needs to be investigated, admin needs to release the email first and ask the recipient to forward the email to admin after the email is released. It's a bit risky for normal user…
-
Can we integrate Microsoft Sentinel (SIEM) with Elements Collaboration Protection?
Issue: Can we integrate Microsoft Sentinel (SIEM) with Elements Collaboration Protection? Resolution: Integration of Microsoft Sentinel with Elements Collaboration Protection is not possible. Article no: 000043757