Remediation App

This page includes:

About the remediation app

The FortiMail Workspace Security remediation app enables emails to be remediated. This is the relocation by FortiMail Workspace Security of an email when the verdict for the scan of an email is changed - after the email has been delivered to the recipient. Changes to the verdict of a scan are performed using the "Change verdict" functionality in the Scans page.

When the FortiMail Workspace Security remediation app is installed, the following remediation processes are performed:

Verdict change	Remediation process
From clean to malicious	The remediation app will attempt to remove the email from the recipient’s mailbox - and quarantine the email. This will occur even if the recipient has moved the email from the Inbox to a different folder in the mailbox. Limitation - Microsoft 365 API integrations: If the recipient has already deleted the email, then the email will remain in the Deleted Items folder or the Trash folder - and will therefore not be quarantined. This remediation process applies only if malicious emails are configured to be quarantined. For details, see Quarantine mode.
From clean to spam	The remediation app will attempt to: move the email from the recipient's Inbox to the recipient’s Spam folder or Junk folder. or remove the email from the recipient’s Inbox, and quarantine the email - if spam emails are configured to be quarantined. For details, see Quarantine mode.

Verdict change

Remediation process

From clean to malicious

The remediation app will attempt to remove the email from the recipient’s mailbox - and quarantine the email. This will occur even if the recipient has moved the email from the Inbox to a different folder in the mailbox.

Limitation - Microsoft 365 API integrations: If the recipient has already deleted the email, then the email will remain in the Deleted Items folder or the Trash folder - and will therefore not be quarantined.

This remediation process applies only if malicious emails are configured to be quarantined. For details, see Quarantine mode.

From clean to spam

The remediation app will attempt to:

move the email from the recipient's Inbox to the recipient’s Spam folder or Junk folder.

or
remove the email from the recipient’s Inbox, and quarantine the email - if spam emails are configured to be quarantined. For details, see Quarantine mode.

The remediation app is installed as part of the email integration onboarding process.

Note: In addition to the email relocation functionality described above, the remediation app may also be used to determine the number of licenses that are included in particular integration configurations.

Limitations

The remediation app is available for Microsoft 365 integrations [Inline and API] and Google Workspace integrations only. The remediation app isn't available for Microsoft Exchange or "Other" integrations.

Is the remediation app installed

To determine if the remediation app is installed:

In FortiMail Workspace Security, in the left navigation menu, select Settings > Bundles and Channels.
1. For Microsoft 365: The remediation app is installed if Active appears to the right of Email Service > Microsoft 365.
2. For Google Workspace: The remediation app is installed if Active appears to the right of Email Service > Google Workspace.

Enabling the remediation app - Microsoft 365

To enable the remediation app - Microsoft 365:

In FortiMail Workspace Security, in the left navigation menu, select Settings > Bundles and Channels.
Under Enabled Channels, locate Email Service > Microsoft 365, and then click Activate.
A pop-up will open. Click Enable M365 APP in the bottom right corner.
A pop-up window will open, asking you to sign in to Microsoft 365.
Use the credentials of the relevant global admin to sign in, review the required permissions, and then approve them.
Make sure that the remediation app is now installed. See Is the remediation app installed above.