Forum Discussion

StephanGee's avatar
StephanGee
Steel Contributor
Oct 26, 2023

Teams Webinar - Registration mail goes to Quarantine

Hi everyone,

 

i try to get rid of Zoom as our webinar tool - so i tried the Teams webinar feature.

Setup was quite easy - but after the first users registered i saw that the  

"You're registered for Webinar: xxx" are going to Quarantine! 

This happened for an internal webinar. How can that be?

 

I then submitted them as "false positive" getting the answer:

This looks like impersonation of a brand. The message contains content that looks like it belongs to a specific brand but is not from that organization. We recommend that you do not open these messages.

 

There must be a rule to allow these mails to the inbox in general. Yes - our "brand" is in the mail address - but i cannot fix that can i?

 

BR Stephan

3 Replies

    • StephanGee's avatar
      StephanGee
      Steel Contributor
      Thanks. But according to MS that is not best "security" practice. I have to do this until there is a fix.
      And i cannot influence customer systems - so it would be great if there would be a fix for this behaviour.
      • JeremyTBradshaw's avatar
        JeremyTBradshaw
        Steel Contributor
        Hello, in the same boat. .Health TLD domains wreaking havoc on companies with the word "Health" in their name. Uh oh, submit = "This looks like impersonation of a brand". I think the solution may be TABL Allow Entry for the sender or domain, or trusted sender or domain in the Anti-Phish policy - but have not tested the latter.

Resources