Views:
Cloud App Security stores data as searchable indexes in cloud databases. Use these quarantine facets to narrow a search to a specific data set. The following tables describe the available quarantine facets.

Exchange Online Quarantine Facets

Facet
Description
Status
Current status of an email message violating a policy. Options include:
  • Quarantining
  • Quarantined
  • QuarantineFailure
  • Restoring
  • RestoreSuccess
  • RestoreFailure
  • Deleting
  • DeleteSuccess
  • DeleteFailure
Security Filter
The security filter includes:
  • Virtual Analyzer
  • File Blocking
  • Web Reputation
  • Data Loss Prevention
  • Malware Scanning
  • Advanced Spam Protection
  • Threat Mitigation API
Affected User
Mailbox that sent or received an email message violating a policy.

Exchange Online (Inline Mode) Quarantine Facets

Facet
Description
Status
Current status of an email message violating a policy. Options include:
  • Quarantining
  • Quarantined
  • QuarantineFailure
  • Restoring
  • RestoreSuccess
  • RestoreFailure
Security Filter
The security filter includes:
  • Virtual Analyzer
  • File Blocking
  • Web Reputation
  • Data Loss Prevention
  • Malware Scanning
  • Advanced Spam Protection
Affected User
Mailbox that received an email message violating a policy.
Mail Direction
Inbound or outbound email message.

OneDrive, SharePoint Online, Microsoft Teams (Teams), Box, Dropbox, and Google Drive Quarantine Facets

Facet
Description
Status
Current status of a file violating a policy. Options include:
  • Quarantining
  • Quarantined
  • QuarantineFailure
  • Restoring
  • RestoreSuccess
  • RestoreFailure
  • Deleting
  • DeleteSuccess
  • DeleteFailure
Security Filter
The security filter includes:
  • Virtual Analyzer
  • File Blocking
  • Web Reputation
  • Data Loss Prevention
  • Malware Scanning
Affected User
User who uploaded or modified a file violating a policy.

Salesforce Quarantine Facets

Facet
Description
Status
Current status of an object record violating a policy. Options include:
  • Quarantining
  • Quarantined
  • QuarantineFailure
  • Restoring
  • RestoreSuccess
  • RestoreFailure
  • Deleting
  • DeleteSuccess
  • DeleteFailure
Security Filter
The security filter includes:
  • Web Reputation
  • Malware Scanning
  • Data Loss Prevention
Affected User
User account that updated an object record violating a policy.

Gmail Quarantine Facets

Facet
Description
Status
Current status of an email message violating a policy. Options include:
  • Quarantining
  • Quarantined
  • QuarantineFailure
  • Restoring
  • RestoreSuccess
  • RestoreFailure
  • Deleting
  • DeleteSuccess
  • DeleteFailure
Security Filter
The security filter includes:
  • Virtual Analyzer
  • File Blocking
  • Web Reputation
  • Data Loss Prevention
  • Malware Scanning
  • Advanced Spam Protection
Affected User
Mailbox that received an email message violating a policy.

Gmail (Inline Mode) Quarantine Facets

Facet
Description
Status
Current status of an email message violating a policy. Options include:
  • Quarantining
  • Quarantined
  • QuarantineFailure
  • Restoring
  • RestoreSuccess
  • RestoreFailure
  • Deleting
  • DeleteSuccess
  • DeleteFailure
Security Filter
The security filter includes:
  • Virtual Analyzer
  • File Blocking
  • Web Reputation
  • Data Loss Prevention
  • Malware Scanning
  • Advanced Spam Protection
Affected User
Mailbox that received an email message violating a policy.
Mail Direction
Inbound or outbound email message.