IMAP Block Overview

The IMAP Block monitor page lists blocked emails with their threat score and other details including sender and recipient. You can also take action on blocked emails here, including releasing them and adding them to the blocklist.

Table 1 shows information available from the Summary View tab.

Table 1: Blocked Email Summary View

Field	Description
ATP Cloud Realm	Select the registered Juniper ATP Cloud realm from the list.
Time Range	Use the slider to narrow or increase the time-frame within the selected the time parameter in the top right: 12 hrs, 24 hrs, 7 days or custom.
Malicious Email Count	This lists the total number of malicious emails scanned during the chosen time-frame and then categorizes them into blocked, blocked and not allowed, quarantined and allowed.
Emails Scanned	This is a graphical representation of all scanned emails, organized by date.

Table 2 shows information available from the Detail View tab.

Table 2: Blocked Email Detail View

Field	Description
Recipient	Specifies the email address of the recipient.
Sender	Specifies the email address of the sender.
Subject	Click Read This to go to the Juniper ATP Cloud quarantine portal and preview the email.
Date	Specifies the date the email was received.
Malicious Attachment	Click on the attachment name to go to the Juniper ATP Cloud file scanning page where you can view details about the attachment.
Size	Specifies the size of the attachment in kilobytes.
Threat Score	Specifies the threat score of the attachment, in a scale of 0-10, with 10 being the most malicious.
Threat Name	Specifies the type of threat found in the attachment, for example, worm or trojan.
Action	Specifies the action taken, including the date and the person (recipient or administrator) who took the action.

Using the available buttons on the Details page, you can take the following actions on blocked emails:

Unblock Attachment for Selected User(s)
Unblock Attachment for All Users