Cisco Cisco Email Security Appliance C170 Guia Do Utilizador
21-31
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
Chapter 21 Automatically Remediating Messages in Office 365 Mailboxes
Monitoring Mailbox Remediation Results
Configure Remedial Actions on Messages Delivered to End Users When the Threat Verdict Changes
to Malicious
to Malicious
Before You Begin
Make sure that you have configured Office 365 mailbox settings on your appliance. See
Procedure
Step 1
Select Mail Policies > Incoming Mail Policies.
Step 2
Click the link in the Advanced Malware Protection column of the mail policy to modify.
Step 3
Select Enable Mailbox Auto Remediation.
Step 4
Specify the action to be taken on messages delivered to end users when the threat verdict changes to
malicious. Depending on your requirements, choose one of the following remedial actions:
malicious. Depending on your requirements, choose one of the following remedial actions:
•
Forward to an email address. Select this option to forward the message with malicious attachment
to a specified user, for example, an email administrator.
to a specified user, for example, an email administrator.
•
Delete the message. Select this option to permanently delete the message with malicious attachment
from the end user’s mailbox.
from the end user’s mailbox.
•
Forward to an email address and delete the message. Select this option to forward the message with
malicious attachment to a specified user, for example, an email administrator and permanently
delete that message from the end user’s mailbox.
malicious attachment to a specified user, for example, an email administrator and permanently
delete that message from the end user’s mailbox.
Note
Messages from certain folders (for example, Deleted Items) cannot be deleted as Office 365
services do not support deletion of messages from these folders.
services do not support deletion of messages from these folders.
Step 5
Submit and commit your changes.
Related Topics
•
•
•
Monitoring Mailbox Remediation Results
You can view the details of the mailbox remediation results using the Mailbox Auto Remediation report
page (Monitor > Mailbox Auto Remediation). Use this report to view details such as:
page (Monitor > Mailbox Auto Remediation). Use this report to view details such as:
•
A list of recipients for whom the mailbox remediation was successful or unsuccessful
•
Remedial actions taken on messages
•
The filenames associated with a SHA-256 hash
The Recipients for whom remediation was unsuccessful field is updated in the following scenarios: