Enforcement or Reporting Mode

Admins can choose to have Impersonation Protection in Enforcement Mode or Reporting Mode.

Enforcement Mode

This is Impersonation Protection’s default state.

In Enforcement Mode, email messages are examined for advanced threats and appropriate actions can be automatically taken. Example: a phishing email is automatically be moved to the junk folder once detected (assuming that is how Impersonation Protection is configured).

Manual remediation, in which an admin views the details of a message and manually takes action on it, is also available.

Reporting Mode

If Impersonation Protection is in Reporting Mode, email messages are still examined for advanced threats, but will not be automatically remediated.

Manual remediation can still take place. Example: when looking at the details of a phishing email, you can click a button to block the sender of the message or if it should not be considered phishing, click to report it to Barracuda Networks as a false positive.

Selecting Enforcement Mode or Reporting Mode

See the Advanced attack responses section of How to Specify Attack Response OptionsPreview. Selecting Leave in inbox for the Advanced threat option will place Impersonation Protection in Reporting Mode.

Impersonation Protection's Current State

If Reporting Mode is visible in a banner at the top of the Impersonation Protection Dashboard or any other page, Impersonation Protection is in Reporting Mode.

If the banner is not visible at the top of the Impersonation Protection Dashboard or any other page, Impersonation Protection is in Enforcement Mode.