Mimecast Indicates Malicious Content – PSAT (Educate)

Issue – Mimecast indicates that a Phishing URL has malicious content even after mail flow safelisting has been completed to allow message delivery.

Cause – Mimecast detects that user-entered data are being captured on the landing page and categorizes this as malicious.

Solution – It may be necessary to create exceptions in your web proxy to allow network traffic to the landing pages and Teachable Moments in Phishing campaigns.  A link to the Mimecast Community with more information on managing URLs for Mimecast’s Targeted Threat Protection can be found here: https://community.mimecast.com/s/article/Targeted-Threat-Protection-Managed-URLs-1936142763