Post-delivery protection
You can connect your Microsoft 365 or Google Workspace domains to turn on post-delivery protection features such as Auto search and remediate and On demand clawback.
Click the General Settings icon 
. Under Post Delivery Protection, click PDP Settings.
Alternatively, you can go to My Products > Email Security > Settings, then open the same PDP Settings section under Post Delivery Protection.
Before you start
You must add and connect your Microsoft 365 or Google Workspace domains to Sophos Central.
You can add and manage your domains in the following locations:
- Gateway Domain Settings/Status: Add Microsoft 365 Gateway domains and Google Workspace domains.
- M365 Mailflow Domain Settings/Status: Add Microsoft 365 Mailflow domains.
Note
You must be a Super Admin to set up and manage domain connections for post-delivery protection.
Features
Post-delivery protection includes features that help you detect and remove malicious or objectionable emails after they've reached users' inboxes.
These features are turned off by default. You can configure them when you're ready.
Auto search and remediate
When Auto search and remediate is turned on, Sophos Email moves messages from your users' inboxes to post-delivery quarantine if they turn malicious.
On-demand clawback
When On-demand clawback is turned on, you can manually retract delivered messages from the mailboxes of one or more recipients into post-delivery quarantine if you consider the message unsuitable for the recipient.
Set up post-delivery protection
Choose the setup guide for your email platform:
- For Microsoft 365 domains, see Microsoft 365 PDP.
- For Google Workspace domains, see Google Workspace PDP.