We've moved the Detection settings (Quarantine and Follow URLs) from the Preferences page to the Channels page - where you can now find the Detection settings under Default Channel Settings. This helps you to manage your channel settings on a single page.

Perception Point Microsoft 365 Inline customers and partners:

Since Microsoft's recent changes to some of its protection mechanisms, some "clean" emails may now be sent to the Microsoft quarantine center after being scanned by Perception Point.

To prevent this behavior, perform the following procedure in your Microsoft 365 environments to add entries to the Tenant Allow/Block List:

1. Browse to: https://security.microsoft.com/tenantAllowBlockList?viewid=SpoofItem.

2. Click (+) Add.

3. Add the Perception Point IPs [for your environment], using the following format:

 *,<PERCEPTION POINT IP>

    Important: For each entry that you add, make sure to add "*," before the IP address - to create the required domain pairs.

    For details of the IPs for each environment, and how to determine your environment, see here in the Perception Point Documentation Center.

4. Make sure that Action is set to Allow.

[Advanced Browser Security] When configuring extension profiles, we've renamed the Data Loss Prevention tab to now be called the Website Rules tab. We did this to accommodate the extra functionality that is being added to this page.

In addition, the rule priority on this page now works as follows:

A matching rule that is higher in the list of rules takes precedence over a matching rule that is lower down. For example, if rule #2 allows access to a specific website, and rule #5 prevents access to the same website, access to the website will be allowed.

You can reorder the rules by using the drag-and-drop controls on the left of the rules list.

In our latest release of X-Ray, whitelists are now referred to as allow lists, and blacklists are referred to as block lists. There is no change in the functionality of any of these lists.

You can now associate escalation contact email addresses with your organization. These are the email addresses to which emails will be sent by Perception Point in case of an emergency, such as account takeovers and Business Email Compromise issues. The escalation contacts enable prompt resolution of urgent incidents. Providing an active 24/7 escalation contact address enables quick response to critical situations - minimizing disruptions, and ensuring the security and reliability of your account and emails. Specifying escalation contacts is now mandatory for all new organizations. It is recommended that you specify a group email address for your escalation contacts.

[Advanced Browser Security] New! When an end user downloads a file, the browser extension displays a toast notification. We've added a progress bar to the toast notification. The progress bar shows the specific task that is being performed, and an estimate of the download completion percentage.

[Advanced Browser Security] You can now display your organization's name in all end-user toast notifications. The organization name that you specify will replace the default "Perception Point" in the toast notifications. You specify the organization name in the Settings > General Settings page in the Advanced Browser Security Console.

[Advanced Browser Security] Block pages that prevent access to downloaded files and to websites can include custom messages. You can now add a link that will appear below the custom messages. For example, you could add a link to a page that enables users to open a support ticket to request access to the blocked file.

This new functionality is included in the "Custom Messages" tab inside extension profiles. You specify the text of the link, and the URL that will open when the link is clicked. 

The new Incident Response Summary page gives you greater visibility into the work that our incident response team is constantly doing: protecting your organization; saving you time and money. 

Here are some of the key features you'll find on the new Incident Response Summary page:

1. Incident tracking: The summary page provides real-time updates on the number of incidents reviewed by our incident response team, so you can see the scope of the work being done to keep your organization safe.
2. Breakdown of incident review and time saved: The summary page provides a breakdown of the number of incidents reviewed and the total hours saved by our incident response team, giving you a more detailed understanding of the impact of the IR team.
3. Incident trends: We've included a section that shows the number of incidents that were reviewed over time, so you can track trends and identify areas of concern.
4. Blog posts: We've added a shortcut to our latest blog posts about incident response - so you can stay up to date with the latest industry trends and best practices.

With the Incident Response Summary page, you can have confidence that our incident response team is working tirelessly to protect your organization, and you can see the impact of their work in real-time.