Quarantine & security
Keep unwanted and risky mail out of your team's inboxes, and control how people sign in. Incoming mail is spam-scored automatically; quarantine rules let you go further.
Spam filtering
Every incoming message is scored for spam and viruses before delivery. Clear spam is filed to each user's Spam folder automatically — there's nothing to configure for the basics. Users can mark Not spam to correct mistakes.
Quarantine rules
For stricter control, add tenant-wide quarantine rules (Quarantine → Rules). A rule matches on things like sender, sender domain, subject, spam score, or the spam flag, and then either holds the message in quarantine for review or rejects it outright.
- Hold — the message is kept in the quarantine inbox for an admin to release or delete.
- Reject — the message is refused at the door and never delivered.
Quarantine inbox
Held messages appear in the Quarantine inbox. Review a message's sender, subject and score, then release it to the recipient if it's legitimate, or delete it.
Login policy
Under Login policy you can tighten sign-in for the whole tenant — for example how many concurrent sessions are allowed and how idle sessions time out. Repeated failed logins are rate-limited and can trigger a temporary IP block automatically.
Troubleshooting
| Problem | Cause | Fix |
|---|---|---|
| Good mail is being quarantined | A rule is too broad, or the score threshold is low. | Release the message, then loosen the rule (raise the score threshold or narrow the sender match). |
| Spam still reaches inboxes | Only default scoring is active. | Add a quarantine rule for the offending sender/domain or a minimum spam score. |
| A user is locked out after failed logins | Rate-limiting / temporary IP block. | Wait for the block to clear, or reset their password. Check the login policy if it's too strict. |
What's next?