Views:
Control whether your end users can report emails as false positives and false negatives to Trend Micro or specified administrators.
These settings apply to the email reporting function in the Add-in for Outlook and the warning banner in Correlated Intelligence of Advanced Threat Protection policies.
When email reporting is turned on, Cloud App Security activates the reporting actions in the warning banner at the top of the email body. This applies to anomalous emails detected by predefined correlation rules in Correlated Intelligence.

Procedure

  1. Turn on Report to Trend Micro to allow your users to report emails as spam, phishing, or not a risk to Trend Micro.
    Note
    Note
    Reporting an email also sends a copy of the email to Trend Micro. However, this action does not move or delete the email.
  2. Require manual approval on the reported emails before they can be sent to Trend Micro by selecting Manually confirm whether end users’ email reporting can be sent to Trend Micro.
    After you enable this option, end users’ email reporting will not be sent to Trend Micro until you manually approve the reporting.
    If you disable reporting approval, the existing emails waiting for approval will be automatically approved.
    To get visibility into or manually approve the emails reported by your users, go to Operations → User-Reported Emails. For details, see User-reported emails.
  3. Turn on Report to administrators to allow your end users to report emails to the mailboxes of your organization's administrators for analysis and investigation.
  4. Specify the email address to report emails to.
    Note
    Note
    To prevent reported emails from being scanned and deleted or blocked by Cloud App Security, enter an email address in the current organization.
  5. If your add-in is deployed before March 22, 2024, deploy the add-in again in the Microsoft 365 admin center for your users to report emails to administrators in your organization.
  6. To remove reported spam or phishing emails from your end users' inboxes, select When reported as spam or phishing, move the message to the Junk folder.