Office 365 Mail Security Settings

Quarantine Settings

For details about quarantine, see Managing Quarantine.

Notification Templates and Senders

The content for notifications sent to internal and external end users are controlled through the Office 365 Mail configuration page.

To configure the notification templates:

  1. Navigate to Security Settings > SaaS Applications > Office 365 Mail.

  2. Click Configure for Office 365 Mail.

  3. Scroll down to the end and expand Advanced.

  4. Select the template and make the changes.

Note - Some notifications can be customized from the policy. For more details, see Configuring a Threat Detection Policy Rule and Data Loss Prevention (DLP) Policy and Click-Time Protection Policy.

Available configurable templates

  • Quarantine notification `From`

  • Quarantine notification `From` name

  • Quarantine notification `Reply-To`

  • Quarantine notification subject

  • Quarantine notification subject for suspected malware

  • Password Protected Quarantine notification subject

  • Quarantine notification body

  • Phishing quarantine notification body

  • Encrypted Attachment Warning Banner

  • Require password to release encrypted file notification body

  • Password Protected Quarantine notification body

  • Quarantined notification (admin restore request)

  • Restore request subject

  • Restore request body

  • Decline message subject

  • Decline message body

  • Threat extracted message format

  • Threat extracted attachment name template

  • Phishing quarantine notification subject

  • Phishing quarantine notification body (admin restore request)

  • Phishing decline message subject

  • Phishing decline message body

  • Spam quarantine notification body

  • Spam quarantine notification subject

  • DLP quarantined notification body (admin restore request) - Outbound

  • DLP quarantined notification body (user can restore) - Outbound

  • DLP restoration notification body - Outbound

  • Restore notification subject

  • Outbound DLP - Added header key

  • Outbound DLP - Added header value

  • Inbound DLP - Added header key

  • Inbound DLP - Added header value

  • Phishing - Added header key

  • Phishing - Added header value

  • Suspected phishing - Added header key

  • Suspected phishing - Added header value

  • Sender (Envelope From) to use in an alert sent to quarantine inbox

  • Malware - Added header key

  • Email to use as `Reply-To` in an alert sent to quarantine inbox

  • Malware - Added header value

  • Suspected malware - Added header key

  • Suspected malware - Added header value

  • Spam - Added header key

  • Spam - Added header value

  • Replace "[Promotional]" with:

  • Graymail - Added header key

  • Graymail - Added header value

  • Report Phishing approve subject

  • Report Phishing approve body

  • Report Phishing decline subject

  • Report Phishing simulation subject

  • Report Phishing decline body

  • Outgoing spam quarantine notification body

  • Outgoing phishing quarantine notification body

  • Outgoing phishing quarantine notification body (admin restore request)

  • Outgoing quarantine notification body

  • Outgoing quarantined notification (admin restore request)

  • DLP quarantined notification body (admin restore request) - Inbound

  • DLP quarantined notification body (user can restore) - Inbound

  • DLP restoration notification body - Inbound

  • DLP alert subject to external sender - Inbound

  • DLP alert body to external sender - Inbound

  • DLP manager alert subject - Outbound

  • DLP manager alert body - Outbound

  • DLP manager password protected attachment alert subject - Outbound

  • DLP manager password protected attachment alert body - Outbound

  • Report Phishing Clean Decline Admin Subject

  • Report Phishing Clean Decline Admin Body

  • Report Phishing Clean Decline User Subject

  • Report Phishing Clean Decline User Body

  • Report Phishing Clean Review Admin Subject

  • Report Phishing Clean Review Admin Body

  • Report Phishing Clean Review User Subject

  • Report Phishing Clean Review User Body

  • Report Phishing Clean Review Approve User Subject

  • Report Phishing Clean Review Approve User Body

  • Report Phishing Clean Review Decline User Subject

  • Report Phishing Clean Review Decline User Body

  • Report Phishing Inconclusive Decline Admin Subject

  • Report Phishing Inconclusive Decline Admin Body

  • Report Phishing Inconclusive Decline User Subject

  • Report Phishing Inconclusive Decline User Body

  • Report Phishing Inconclusive Review Admin Subject

  • Report Phishing Inconclusive Review Admin Body

  • Report Phishing Inconclusive Review User Subject

  • Report Phishing Inconclusive Review User Body

  • Report Phishing Inconclusive Review Approve User Subject

  • Report Phishing Inconclusive Review Approve User Body

  • Report Phishing Inconclusive Review Decline User Subject

  • Report Phishing Inconclusive Review Decline User Body

  • Report Phishing Inconclusive Approve Admin Subject

  • Report Phishing Inconclusive Approve Admin Body

  • Report Phishing Inconclusive Approve User Subject

  • Report Phishing Inconclusive Approve User Body

  • Report Phishing Phishing Approve Admin Subject

  • Report Phishing Phishing Approve Admin Body

  • Report Phishing Phishing Approve User Subject

  • Report Phishing Phishing Approve User Body

  • Report Phishing Phishing Review Admin Subject

  • Report Phishing Phishing Review Admin Body

  • Report Phishing Phishing Review User Subject

  • Report Phishing Phishing Review User Body

  • Report Phishing Phishing Review Approve User Subject

  • Report Phishing Phishing Review Approve Admin Body

  • Report Phishing Phishing Review Decline User Subject

  • Report Phishing Phishing Review Decline User Body

  • Restore Request - Clean - Approved by Check Point - End User Notification - Subject

  • Restore Request - Clean - Approved by Check Point - End User Notification - Body

  • Restore Request - Clean - Approved by Check Point - Admin Notification - Subject

  • Restore Request - Clean - Approved by Check Point - Admin Notification - Body

  • Restore Request - Clean - Pending Review - End User Notification - Subject

  • Restore Request - Clean - Pending Review - End User Notification - Body

  • Restore Request - Clean - Pending Review - Admin Notification - Subject

  • Restore Request - Clean - Pending Review - Admin Notification - Body

  • Restore Request - Clean - Approved by Admin - End User Notification - Subject

  • Restore Request - Clean - Approved by Admin - End User Notification - Body

  • Restore Request - Clean - Declined by Admin - End User Notification - Subject

  • Restore Request - Clean - Declined by Admin - End User Notification - Body

  • Restore Request - Inconclusive - Approved by Check Point - End User Notification - Subject

  • Restore Request - Inconclusive - Approved by Check Point - End User Notification - Body

  • Restore Request - Inconclusive - Approved by Check Point - Admin Notification - Subject

  • Restore Request - Inconclusive - Approved by Check Point - Admin Notification - Body

  • Restore Request - Inconclusive - Declined by Check Point - End User Notification - Subject

  • Restore Request - Inconclusive - Declined by Check Point - End User Notification - Body

  • Restore Request - Inconclusive - Declined by Check Point - Admin Notification - Subject

  • Restore Request - Inconclusive - Declined by Check Point - Admin Notification - Body

  • Restore Request - Inconclusive - Pending Review - End User Notification - Subject

  • Restore Request - Inconclusive - Pending Review - End User Notification - Body

  • Restore Request - Inconclusive - Pending Review - Admin Notification - Subject

  • Restore Request - Inconclusive - Pending Review - Admin Notification - Body

  • Restore Request - Inconclusive - Approved by Admin - End User Notification - Subject

  • Restore Request - Inconclusive - Approved by Admin - End User Notification - Body

  • Restore Request - Inconclusive - Declined by Admin - End User Notification - Subject

  • Restore Request - Inconclusive - Declined by Admin - End User Notification - Body

  • Restore Request - Phishing - Declined by Check Point - End User Notification - Subject

  • Restore Request - Phishing - Declined by Check Point - End User Notification - Body

  • Restore Request - Phishing - Declined by Check Point - Admin Notification - Subject

  • Restore Request - Phishing - Declined by Check Point - Admin Notification - Body

  • Restore Request - Phishing - Pending Review - End User Notification - Subject

  • Restore Request - Phishing - Pending Review - End User Notification - Body

  • Restore Request - Phishing - Pending Review - Admin Notification - Subject

  • Restore Request - Phishing - Pending Review - Admin Notification - Body

  • Restore Request - Phishing - Approved by Admin - End User Notification - Subject

  • Restore Request - Phishing - Approved by Admin - End User Notification - Body

  • Restore Request - Phishing - Declined by Admin - End User Notification - Subject

  • Restore Request - Phishing - Declined by Admin - End User Notification - Body

  • Restore quarantined emails with API instead of SMTP

  • Enable quarantine of calendar invites with threats detected