We are having a percentage of our scans from the email address associated with our scanner that are being sent to Quarantine. Examining the list in defender explorer, it appears that the anti-fishing and anti-spam. policies are sending our scans to Quarantine.
In some instances, the scale. will show as email delivered. also with a message that email failed and the user never got the scan. another issue is the spf / dmarc / dkim is failing. Any ideas on why a small percentage of scans are getting quarantined by anti phish

