Quarantine by Microsoft

When Perception Point X-Ray is integrated with a Microsoft email solution, Microsoft Defender may quarantine emails before the emails reach Perception Point X-Ray. Perception Point X-Ray therefore doesn't ever receive these emails, and consequently can't scan these emails. This can result in a scenario where admin users must manage quarantined emails in two applications: Perception Point X-Ray and Microsoft Defender.

To enable admin users to manage quarantined emails in just one application, emails that were quarantined by Microsoft Defender can be included in the Perception Point X-Ray Scans page - even though these emails weren't scanned by Perception Point X-Ray.

You can easily identify emails in the Scans page that were quarantined by Microsoft Defender. These emails have the "Quarantined by Microsoft" icon [] on the left of the Scans page. 

In addition, these emails will have the following Action: Quarantined by Microsoft.

Perform the procedure below to list all the scans that were quarantined by Microsoft Defender:

1. In the Scans page, open the Advanced filters feature. For details, see "Advanced filters" on page 708.
2. Scroll down the list of filter options, and then under Action, select "Quarantined by Microsoft".

• If Perception Point X-Ray is configured to scan incoming email only, then the Scans page will include only incoming email that was quarantined by Microsoft Defender - outgoing email that was quarantined by Microsoft Defender will not be displayed.
• If Perception Point X-Ray is configured to scan incoming and outgoing email, then the Scans page will include incoming and outgoing email that was quarantined by Microsoft Defender.

References:

https://docs.perception-point.io/WP/Content/PP/Quarantine-Microsoft.htm

Acronis: 

https://docs.perception-point.io/acronis/Content/PP/Quarantine-Microsoft.htm