When using Synapse with the Email Security.cloud correlation feature, you see Internal Error showing as the status for this feature.
The Health Status may also show the message, "Synapse Email correlation is malfunctioning: please call support"
This is indicating that the ATP system is unable to process the data returned from the Cloud APIs or something else is seriously malfunctioning on the system.
To check basic connectivity
Accessed ATP:Roaming and Email Security.Cloud Correlation server [https://datafeedapi.symanteccloud.com].
If the error message persists for more than 12 hours, please open a case with Technical Support. To assist in troubleshooting, please run the 'gather_logs' command to send diagnostic logs to support for analysis.