Description
Avanan allows you to automate the handling of quarantined restore requests,
Whenever a user requests to restore an email from quarantine, Avanan re-evaluates the email and provides a re-evaluated verdict (clean, phishing, or inconclusive).
Requirements
Access to Avanan Portal.
The Process
- Go to Security Settings > User Interaction > Quarantine.
- In the Reviewing Phishing Reports drop-down, select one of these options:
Manual - The administrator manually reviews every report.
Clean: Send for admin review
Inconclusive: Send for admin review
Phishing: Send for admin review
Semi-automatic - Automated actions for some updated verdicts and manual review for others
Clean: Approve request. Restore the email
Inconclusive: Send for admin review
Phishing: Decline request. Email remains in quarantine
Automatic - Automatic recommendation is performed.
Clean: Approve request. Restore the email
Inconclusive: Approve request. Restore the email
Phishing: Decline request. Email remains in quarantine
- Expand the Workflows and notifications section and select the required workflows.
- Select whom to notify:
- Notify Admin - The administrator receives an email notification when the request is sent for their review.
- Notify User:
- When report is sent for review - The system sends a notification to the end user when it sends the request for review.
- When report is approved - The end user receives an email notification when the request is approved.
- When report is declined - The end user receives an email notification when the request is declined.
Note - The availability of these options depends on the workflow selected.
- To customize an email notification (subject and body), click next to the specific notification, make the necessary changes, and then click Save.
- Click Save and Apply.
Re-evaluated Verdict of Quarantined Restore Requests:
When Avanan receives an end user's restore request, it re-evaluates the email, shows the updated verdict under the Security Stack, and takes the configured action.
