Enforcement or Reporting Mode
Admins will soon be able to choose between Enforcement Mode and Reporting Mode.
Impersonation Protection is currently always in Enforcement Mode. Email messages are examined for advanced threats and appropriate actions can be automatically taken. Actions can also be manually executed.
Soon, admins will have the option to switch Impersonation Protection to Reporting Mode. Email messages will still be scanned for advanced threats, but automatic remediation will not occur.
If Reporting Mode is visible at the top of the Impersonation Protection Dashboard or any other page, Impersonation Protection is in Reporting Mode.
If Reporting Mode is not visible at the top of the Impersonation Protection Dashboard or any other page, Impersonation Protection is in Enforcement Mode.
Enforcement Mode
In Enforcement Mode, email messages are examined for advanced threats and appropriate actions can be automatically taken. Example: a phishing email is automatically be moved to the junk folder once detected (assuming that is how Impersonation Protection is configured).
Manual remediation, in which an admin views the details of a message and manually handles it, is also available.
Reporting Mode
If Impersonation Protection is in Reporting Mode, email messages are still examined for advanced threats, but will not be automatically remediated.
Manual remediation can still take place. Example: when looking at the details of a phishing email, you can click a button to block the sender of the message or if it should not be considered phishing, you can click to report it to Barracuda Networks as a false positive.