What you are evaluating
The scored configuration is Microsoft 365 email with enforcement and Mail Explorer, using the documented Email Security service. Messaging apps, file storage, DMARC management and other add-ons are not assumed to be in the email entitlement.
A useful evaluation context
Consider for teams comparing integrated Microsoft 365 protection with an explicit inline or post-delivery operating mode.
Documented capabilities
The vendor describes these capabilities in the linked sources. Availability depends on the product edition and supported environment.
- Protection modes distinguish detection-only, detect-and-remediate and inline prevention.
- Mail Explorer supports investigation and post-delivery quarantine of selected messages.
- Administrator review can approve or decline an end user’s quarantine release request.
Where it fits in the work
- Confirm the selected Microsoft 365 protection mode and required tenant permissions.
- Scope the policy to training users and inspect a message through Mail Explorer.
- Request release as a user and have a separate authorized administrator review the evidence.
APPLY THE IDEA / ILLUSTRATIVE EXERCISE
Make the outcome observable.
A harmless password-protected training attachment is held for review.
Evidence to look for
Verify that the release request reaches the configured approver and that an approved restore delivers the expected message without creating a broad exception.
Use synthetic data and an authorized test environment. Agree the scope and recovery steps before enabling enforcement.
Questions for your evaluation
- Which permissions and connectors implement the chosen mode?
- Can the administrator explain why a message was quarantined?
- Which collaboration and account-protection modules are separately licensed?
Names you may encounter: Harmony Email & Collaboration · Avanan. Historical names do not establish current availability or feature equivalence.