How to view the Click-time URL Protection incidents in Email Security Cloud

Products

• Email Security.cloud

Issue/Introduction

A Click-time URL Protection incident is a database record that is generated for each blocked URL found in your organization's inbound email. Blocked URLs are categorized in the table as malware, phishing, or spam. Any incidents that are listed were detected in the date range you selected and are only from those domains that have Click-time URL Protection applied.

The click metrics at the top of the table display the processed, allowed, and blocked data for the selected date range. The Processed metric tracks every click of rewritten URLs by end-users during the selected date range. In other words, if a single rewritten URL is clicked 15 times, that URL is processed 15 times. The Processed metric does not include whitelisted URLs because they are not rewritten by Click-time URL Protection. Any Allowed URLs were checked and were found to be free of malware, phishing, or spam threats. The Blocked metric indicates the number of incidents that were generated by blocked URLs that were hosting malware, phishing, or spam.

Environment

Email Security.cloud

Resolution

To view Click-time URL Protection incidents :

• Navigate to Dashboard > Reports > Incidents > Click-time URL Protection Incidents
• Select Date Range