Agari Phishing Defense sensors may report the status of Errors with enforcement actions as shown below:
The Errors with Enforcement actions state is defined as:
More than 20 out of the last 100 messages for that sensor could not be enforced.Individual messages can fail for a variety of reasons and you can check what messages have failed enforcement by creating a search with the Failed Enforcement filter.
You can attempt to retry enforcement on these messages again by running a search with the above filter and then selecting the Enforce Now option for a On-Demand Enforcement action.
Very useful but would be nice to hover over the 'error with enforcement' and it would tell you this inside the portal "More than 20 out of the last 100 messages for that sensor could not be enforced."