Skip to content
Contact support
  • There are no suggestions because the search field is empty.

AI-generated quarantine reasons

Paubox Inbound Email Security uses generative AI to provide clear, easy-to-read explanations for why an email was quarantined. These justifications help you quickly understand the risk and what triggered the quarantine.

 

What are quarantine reasons

When an inbound email is flagged as spam, graymail, phish, virus, virus (macro), or ExecProtect, Paubox generates a short explanation called a quarantine reason.


This explanation summarizes the signals and rules that led the system to classify the message as unsafe or potentially harmful.

Reasons can include:

  • Block list matches

  • Suspicious sender behavior

  • Indicators of spam or unwanted content

  • Phishing-related patterns or impersonation attempts

  • Threat detected in attachments or links

  • Etc.

 

How it works

When an email enters your domain:

  1. Paubox scans the message before it reaches inboxes. This includes reviewing sender reputation, content analysis, behavior and tone, attachment and link scanning, and ruleset checks.

  2. If the email meets criteria for quarantine, it is held and assigned a classification type such as spam, graymail, phish, virus, etc.

  3. The system generates an AI-powered quarantine reason, which outlines the most relevant reason the email was stopped.

 

Where to find quarantine reasons

You can access the AI-generated reasons in the following locations in the Paubox dashboard:

In the email message header

  1. Go to Inbound Security > Quarantine

  2. Click on any email in the quarantine list

  3. Choose View original message

  4. Click on the Header tab

  5. The quarantine reason can be found after "X-Paubox-Security:" at the top of the message header. 

From the Statistics tab

  1. Navigate to Inbound Security > Statistics

  2. Select your date range and domain filters

  3. Click on the email type you want to review:

    • Spam

    • Gray

    • Phish

    • Virus

    • Virus (Macro)

    • ExecProtect

  4. This opens the full list of emails in that category within the date range chosen

  5. Each row includes a Reason column showing the justification for why the message was caught

This view is useful for looking at patterns across large sets of quarantined emails.