Mimecast URL Protection: links found in files, what happens?

You may have received a notification stating “We found suspicious links in these files, They’ve been blocked for the user’s protection.” This is a Mimecast URL Protection notification indicating that the attachment has been removed from the email. The email however, has been delivered without the attachment.

You can observe this when you go to message tracking and view the received and delivered views of the email. When looking at the transmission data of the different views ( assuming it’s an inbound email ) you will observe that when received, the attachment was within the transmission components but when it is delivered to your user the attachment has been replaced by a file called “We found suspicious links.”

The notification and the navigation within the administration console can sometimes be confusing as what action was taken. If you need help with this in the future let us know!