Skip to main content

Automatic Remediation - Removing Phishing Emails

Updated over 3 months ago

This guide will walk you through the process of creating a policy to automatically quarantine or delete an email containing a phishing link.


STEP ONE:

Login to your ManagedMethods console

.


STEP TWO:

Select the "x Enabled" policies button to the right of the desired Cloud Environment.


STEP THREE:

Select the Add Policy button on the bottom right side of the screen.


STEP FOUR:

Give your policy a name.


STEP FIVE:

Select Email as the Source of your policy in the Content column.


STEP SIX:

In the Threats column, select the URL Scan checkbox.


STEP SEVEN:

If you wish to apply this policy to all users, leave the Sharing column blank, otherwise, select the users, OU's, or share direction to apply the policy to.

mceclip0.png

STEP EIGHT:

Select the Apply Button.


STEP NINE:

By default you will now receive an email notification when this policy is violated. To apply automatic remediation look for the Remediation Box in your newly created policy.


STEP TEN:

Remediation options can be configured to suit your organizational needs. Select the Dropdown to choose a remediation option that fits you best.

  • Delete Email: Delete the email from the users inbox.

  • Trash Email: Send the email to the users trash folder.

  • Send Warning: Send a warning email to the user notifying them of the Phishing Link.


STEP ELEVEN:

After choosing a remediation option, a few new options will become available.

  • When: Choose for the remediation to occur immediately, or at a point in the future.

  • Notify User: Notify the user that remediation has been taken against an email of theirs. This is good practice when deleting or trashing an email, as the user may be curious about where their email went. Note: This is not recommended when sending the user a warning, as the user will receive two emails, one for policy violation, and one that they were warned.

  • Notify Admin: You will receive an email when the policy is violated by default, however selecting the Notify Admin checkbox will send an additional email letting you know that action has been taken against an email.


STEP TWELVE:

Save the Policy Page, Setup is complete!

Did this answer your question?