Why can't I find a message in the APD portal?

When searching for a message in the Agari Phishing Defense portal you may not be able to find the message you are looking for. Below are some general use cases of when this typically happens.

SCL score of 5+

By default, Agari skips messages that have a Microsoft Spam Confidence Level (SCL) of 5 or above. As Agari learns from the traffic seen in your organization, we do not want to incorrectly learn from messages Microsoft has already labeled as spam. We expect these messages to be handled upstream by the MS EOP service. 

If you would like to ingest these messages you can change the SCL value we skip on under Manage > Organizations > Processing Exceptions.

Internal or Outbound

If you do not have Insider Impersonation Protection (IIP) enabled you will not be able to see internal or outbound messages. If you would like to enable IIP for your organization please contact your account representative or our support team.

For information about IIP, see What is Insider Impersonation Protection (IIP) and how does it help protect me?.