Some emails, specifically false positive emails, are, at times, detected by Microsoft under the phishing category. Check Point also detects phishing emails. Check Point Harmony Email & Collaboration is a tool that does not pass emails through the user's inbox, even if it feels like an email is not spam or involves phishing. Suppose a tool like Microsoft Defender detects any phishing activity. In such scenarios, emails are quarantined by Microsoft, and then Check Point Harmony Email & Collaboration cannot pass such emails to the user. I feel it is an area that can be improved. There are good options with Check Point Harmony Email & Collaboration, as one can still quarantine suspicious emails, and the users can see those in just a few clicks. The false positives are an area where the tool can introduce certain improvements they can improve by releasing emails to a user's inbox if it feels that there are certain areas consisting of false positives.
In the future, it would be great if it is possible to use the tool with Microsoft to help in the area revolving around false positives. Check Point should be able to release emails to the inbox even if there are some phishing emails. If Check Point finds something to be described as a clean email, it should have the option to automatically release it to the user. At the moment, we don't have that option. They have an option for spam emails but not for the emails associated with phishing.