Overriding Microsoft's False Positive Detections

Emails Falsely Quarantined by Microsoft

Administrators can configure Avanan to automatically release emails quarantined by Microsoft, if Avanan classifies them as Clean / Spam / Suspected Phishing. To do that:

1. Go to Security Settings > User Interaction > Quarantine.

2. In the Override Microsoft Enforcement section, select the Override Microsoft quarantine/send to Junk if Avanan finds the email as clean checkbox and click customize next to it.

3. Select the Automatically restore emails quarantined by Microsoft and Avanan checkbox.

4. From the list, select the required classification of emails to restore from the Microsoft quarantine.

   • Malicious (All verdicts)

   • Phishing

   • High confidence phishing

   • Bulk

   • Spam

   

5. From the list, select the preferred Avanan verdicts.

   • Clean

   • Spam

   • Suspected Phishing

   

6. (Optional) To move emails that Microsoft marks as junk to the user's inbox when Avanan classifies them as clean, select the Move to Inbox for emails that Microsoft sends to Junk and Avanan classifies as Clean checkbox.

7. Click Save and Apply.

   Notes: These emails do not appear in the Daily Quarantine Report (Digest) or the End-User Quarantine Portal (Email Security Portal). The policy workflow do not apply to these emails as the released email is the original email. The email will be sent directly to the user's mailbox.

For information about how the emails are enforced, see Enforcement Flow.

Emails Falsely Sent to Junk by Microsoft

Administrators can configure Avanan to manage phishing emails that Microsoft / Google falsely flags as spam.

For more information, see Overriding Microsoft False Detections as Spam (Send to Junk).

If you only want to apply it to emails allow-listed by Avanan, refer to the Overriding Microsoft / Google sending emails to Junk folder.