Forum Discussion

GreatToHearFromYou's avatar
GreatToHearFromYou
Brass Contributor
Aug 03, 2023

Mail Flow Rule (Transport Rule) Name Missing In Quarantine Details

Since August 2, around 5:00 AM Microsoft stopped showing the name of the Mail Flow Rule (Transport Rule) responsible for quarantined emails in the Policy Name field. It now only shows the name of the...
exchange
microsoft 365
microsoft 365 defender
  • VasilMichev's avatar
    VasilMichev
    Aug 03, 2023
    Run a message trace, you should see the Transport rule reflected in the (detailed) output. It's not going to help you with the UI change of course... for that best submit Feedback in the portal.
drandre222's avatar
drandre222
Copper Contributor
I have the same issue which occurred on the same day. I have opened a support ticket with Microsoft but without any luck. I have been doing the message trace, but it has certainly been time-consuming. I hope there is a resolution soon.
GreatToHearFromYou's avatar
GreatToHearFromYou
Brass Contributor
Sep 09, 2023

drandre222 My ticket has still not been resolved yet either, they keep apologizing for the delay, but I am not hopeful it will ever get resolved. I have been using the Explorer instead, you can add the Transport Rule column which makes it very easy to track what rule quarantined an email in case of a false positive. In Explorer you can also query Transport Rule names in case you have created one that is more prone to false positives, like we have. You can then quickly see if there are any obvious false positives quarantined by that specific Transport Rule.

  • drandre222's avatar
    drandre222
    Copper Contributor
    Sep 09, 2023

    GreatToHearFromYou  Thanks for your response.  Unfortunately with my current tenant, it is only an E3 which does not have the Office 365 Threat Intelligence license.  I may decide to upgrade to this updated licensing.

Resources