Views:

Delete a suspicious email message from all supported mailboxes protected by Cloud App Security using context menus on the Trend Vision One console.

This task is supported by the following services:
  • Cloud App Security

Procedure

  1. After identifying the suspicious email message, access the context or response menu and click Delete Message.
    The Delete Message Task screen appears.
  2. Confirm the targets of the response.
  3. Select the mailboxes that this task applies to.
    Important
    Important
    This task is only applicable on supported mailboxes protected by Cloud App Security.
    If the target message is not found in a supported mailbox protected by Cloud App Security or users have already deleted all instances of the message, you cannot create the task.
  4. Specify a Description for the response or event.
  5. Click Create.
  6. Click Delete Message to confirm the deletion task.
    Trend Vision One creates the task and displays the current task status in Response Management.
  7. Monitor the task status.
    1. Open Response Management.
    2. (Optional) Locate the task using the Search field or by selecting Delete Message from the Action drop-down list.
    3. View the task status.
      • In progress (in-progress.jpg): Trend Vision One sent the command and is waiting for a response.
      • Successful (successful_001.jpg): The command was successfully executed.
      • Partially successful (partially-successful.jpg): One or more commands was unsuccessful.
      • Unsuccessful (error.jpg): An error or time-out occurred when attempting to send the command to the managing server, the agent is offline for more than 24 hours, or the command execution timed out.
      • Action taken by Cloud App Security(actiontakebycasicon.jpg): The email message has already been deleted or quarantined by Cloud App Security. Go to Cloud App Security to learn more.