[Cloud Protection] What to Do If False Positives or Excessive Detection Occur

Please tell me how to return (release) a quarantined item to the user, and how to address issues so that items are detected correctly.

Returning (releasing) an item quarantined by a Cloud Protection policy to its original location

Target: Customers who have configured a Cloud Protection policy to quarantine detected items

Please follow the Procedure below.
By performing this Procedure, items quarantined by Cloud Protection will be returned to their original location.
[Cloud Protection] Checking / Deleting (Releasing) Quarantined Items

How to handle files

Please refer to the Procedure below and submit the file to the sample analysis system.
[Cloud Protection] How to Submit Samples (Sample Analysis System)

※ You can set the administrative status using the following Procedure.

1. From the side menu of the Cloud Protection admin console, access [Detections].
2. Select the checkbox to the left of the target file, then set [Update Status] - [Closed: False Positive] displayed at the bottom of the screen.

How to handle URLs

1. Register as a trusted website
   • By configuring the Target URL according to the Procedure below, you can exclude it from detection by Cloud Protection.
     [Cloud Protection] How to Exclude Emails from a Specific Email Address or a Specific Website
2. Report a false positive from the admin console
   • Follow the Procedure below to report that the URL is a false positive.
     [Cloud Protection] Reporting a Falsely Detected URL
3. Submit to the sample analysis system
   • Please refer to the Procedure below and submit the URL to the sample analysis system.
     [Cloud Protection] How to Submit Samples (Sample Analysis System)