Viewing details of backup items

You can use the Backup view to locate messages placed in Kaspersky Security backup and/or Exchange Online quarantine, review their details, and decide whether a message should be permanently deleted, released to user mailboxes, or saved to disk for further internal inspection or other purposes.

To view details of backup items:

1. Open the Kaspersky Security for Microsoft Office 365 Management Console.
2. In the left part of the page, select the Backup section.

The backup data are summarized in a table containing the following message details:

• date of message detection by the application;
• sender's address;
• recipient's address;
• message subject;
• user mailbox where the message was detected;
• name of the detected threat;
• traffic type (Incoming, Outgoing, Internal, or N/A if no message sender and/or recipients are specified);
• current message storage (Kaspersky Security backup or Exchange Online quarantine);
• status assigned to the message as a scan result.

  For violations detected by Kaspersky Security for Microsoft Office 365:

  • Infected;
  • Phishing;
  • Filtered attachment;
  • Spam;
  • Mass mail.

  Messages cannot be moved to backup by the Anti-Spam module. The Spam or Mass mail status can be displayed in the table of backup items only if it was assigned to the message together with the Phishing, Infected or Filtered attachment status.

  Statuses assigned to messages by Kaspersky Security for Microsoft Office 365 are additionally marked by the icon.

  For violations detected by Exchange Online:

  • Bulk mail;
  • Phishing;
  • Mail flow rule match;
  • Malware;
  • Spam.

  Statuses assigned to messages by Exchange Online are additionally marked by the icon.

To display specific message details only, click the Columns button on the right side of the page and select the check boxes next to the required columns.

To refresh the Kaspersky Security backup data, reload the corresponding Management Console web page in your browser.

The new Exchange Online quarantine data are automatically requested by the application once an hour. In urgent cases, you can force the application to retrieve new messages from Exchange Online quarantine by clicking the Load items button on the right side of the page.

If you refresh the Backup data, any check boxes next to the backup items in the list will be cleared.

Page top