IMAP Block Overview
Access this page from Monitor > Threat Prevention > IMAP Block.
The IMAP Block monitor page lists blocked emails with their threat score and other details including sender and recipient. You can also take action on blocked emails here, including releasing them and adding them to the blocklist.
Table 1 shows information available from the Summary View tab.
Table 1: Blocked Email Summary View
Sky ATP Realm
Select the registered Sky ATP realm from the list.
Use the slider to narrow or increase the time-frame within the selected the time parameter in the top right: 12 hrs, 24 hrs, 7 days or custom.
Malicious Email Count
This lists the total number of malicious emails scanned during the chosen time-frame and then categorizes them into blocked, blocked and not allowed, quarantined and allowed.
This is a graphical representation of all scanned emails, organized by date.
Table 2 shows information available from the Detail View tab.
Table 2: Blocked Email Detail View
Specifies the email address of the recipient.
Specifies the email address of the sender.
Click Read This to go to the Sky ATP quarantine portal and preview the email.
Specifies the date the email was received.
Click on the attachment name to go to the Sky ATP file scanning page where you can view details about the attachment.
Specifies the size of the attachment in kilobytes.
Specifies the threat score of the attachment, in a scale of 0-10, with 10 being the most malicious.
Specifies the type of threat found in the attachment, for example, worm or trojan.
Specifies the action taken, including the date and the person (recipient or administrator) who took the action.
Using the available buttons on the Details page, you can take the following actions on blocked emails:
Unblock Attachment for Selected User(s)
Unblock Attachment for All Users