Forum Discussion
Solved
User accessed link in ZAP-quarantined email <-> Safe Links reports
Currently I am working on an alert telling me a user accessed a link in ZAP-quarantined email. If I check the Safe Links report and filter it for the domain in the link I get zero results. Can an...
- I found a little more. It just does not show up when I filter for the Mail in the Safe links report. If I search explicitly in the Safe Links via an Create on-demand report, the URL and click show up. So its down to being a presentation layer glitch.
Hello Tiennes,
thank you a lot for your answer. I understand the concepts as such. What I dont understand is that Safe-links should envelope any links sent to my users. So if a user clicks a link that click should be visible in the safe links report. If I dont find a domain in the report at all it should be safe to say that no user clicked on a link to that domain sent to him in an email.
At the same time Defender tells me the user has accessed the link.
This is contradicting, either he has or has not clicked the link. I am trying to find out which is true and why I am either getting an alert for a click that didnt happen or why I dont see the click in the report where it should be listed.
thank you a lot for your answer. I understand the concepts as such. What I dont understand is that Safe-links should envelope any links sent to my users. So if a user clicks a link that click should be visible in the safe links report. If I dont find a domain in the report at all it should be safe to say that no user clicked on a link to that domain sent to him in an email.
At the same time Defender tells me the user has accessed the link.
This is contradicting, either he has or has not clicked the link. I am trying to find out which is true and why I am either getting an alert for a click that didnt happen or why I dont see the click in the report where it should be listed.
I found a little more. It just does not show up when I filter for the Mail in the Safe links report. If I search explicitly in the Safe Links via an Create on-demand report, the URL and click show up. So its down to being a presentation layer glitch.