diff --git a/defender-office-365/quarantine-faq.yml b/defender-office-365/quarantine-faq.yml index 2868014e72..32f68f19b2 100644 --- a/defender-office-365/quarantine-faq.yml +++ b/defender-office-365/quarantine-faq.yml @@ -141,6 +141,8 @@ sections: - Some mail flow rules that quarantined a message can cause the released message to be quarantined again. + - Inform admins that routing released quarantine messages to onpremises recipients can cause messages to lose anti-spam headers, which makes the messages land in quarantine again after release. + Admins can use [message trace](message-trace-defender-portal.md) to determine if a released message was delivered to the recipient's Inbox. - question: | @@ -219,6 +221,8 @@ sections: > > For messages quarantined by zero-hour auto purge (ZAP), quarantine notifications are generated based on when the message was quarantined, not when the message was delivered to the mailbox. + You can also set up quarantine notifications for internal (intra-organization) messages only in quarantine policies. + - question: | Why aren't users receiving notifications about their quarantined messages? answer: |