Quarantine Facets

Cloud App Security stores data as searchable indexes in cloud databases. Use these quarantine facets to narrow a search to a specific data set. The following tables describe the available quarantine facets.

Table 1. Exchange Online Quarantine Facets

Facet

Description

Status

Current status of an email message violating a policy. Options include:
  • Quarantining

  • Quarantined

  • QuarantineFailure

  • Restoring

  • RestoreSuccess

  • RestoreFailure

  • Deleting

  • DeleteSuccess

  • DeleteFailure

Security Filter

The security filter includes:
  • Virtual Analyzer

  • File Blocking

  • Web Reputation

  • Data Loss Prevention

  • Malware Scanning

  • Advanced Spam Protection

Affected User

Mailbox that received an email message violating a policy.

Table 2. OneDrive for Business, SharePoint Online, Box, Dropbox and Google Drive Quarantine Facets

Facet

Description

Status

Current status of a file violating a policy. Options include:
  • Quarantining

  • Quarantined

  • QuarantineFailure

  • Restoring

  • RestoreSuccess

  • RestoreFailure

  • Deleting

  • DeleteSuccess

  • DeleteFailure

Security Filter

The security filter includes:
  • Virtual Analyzer

  • File Blocking

  • Web Reputation

  • Data Loss Prevention

  • Malware Scanning

Affected User

User who uploaded or modified a file violating a policy.