Overview

Automatic Remediation – Automatic Remediation can automatically remediate email messages that contain malicious URLs or attachments. All user-reported messages are automatically scanned for malicious content. When a threat is detected all matching emails are moved from users’ mailboxes into their junk folders. Security teams will receive an alert notifying them of an incident.

Incident Response (included with all current Email Protection plans and the legacy Barracuda Email Protection Premium and Premium Plus plans) – Remediate threats quickly and efficiently, by automating investigative workflows and enabling direct removal of malicious emails. Take advantage of fully-automated, post-delivery incident response and threat-hunting capabilities.

To use Automatic Remediation or Incident Response, you must have:

• Microsoft 365

Your first login requires Microsoft 365 global administrator credentials.

Accounts for the following products add the functionality listed below, but are not required for Incident Response.

These features are included in Barracuda Email Protection plans.

• Creating a new incident.

• Working with geographical insights.

• Working with emails users reported as suspicious through

  • the Barracuda Email Protection Add-in.

  • the Message Log in Email Gateway Defense.

For a description of configuration requirements for integration, refer to Integration with Other Barracuda Networks Features.

• Adding block exception policies for linked domains.

• Remediating incidents found in Impersonation Protection.