Skip to main content
khicks4
Staff
Staff
January 6, 2025

Troubleshooting Tip: Why a pop-up is received while using New Outlook or OWA when sending an email

Description

This article describes the pop-ups (popup) that may be seen when using the FortiDLP New Outlook plugin.

Scope

FortiDLP.

Solution

When sending an email using the FortiDLP New Outlook add-in, FortiDLP will process the email and determine whether the email should be blocked. In some scenarios, New Outlook or OWA will prompt pop-ups for Add-ins if they take long periods of time to complete before an email can be sent.  The following flowchart describes the process FortiDLP takes before sending or blocking an email and depicts at which point pop-ups can be viewed.

2025-01-06 10_13_55-New outlook Pop up flow - Google Slides.png

 
In the scenarios where pop-ups are presented due to processing time, these pop-ups are non-configurable and enforced by Microsoft (outside of the scope of the add-on itself). The following messages are expected from New Outlook/OWA when sending an email when using the FortiDLP add-in:

  • When processing takes more than 5 seconds:


2024-12-20 15_19_15-agent-surgery (Channel) - Next - Slack.png

 

  • When processing completes, took more than 30 seconds, and the email is not blocked:


2024-12-20 15_21_21-agent-surgery (Channel) - Next - Slack.png

 

  • When processing completes and the email is blocked:


2024-12-20 16_04_07-mRemoteNG - HomeLab.xml - win-ep-4.png

 
There are additional scenarios that may occur as a result of Microsoft issues. See Error shown to user (and fetch call cancelled) if onAppointmentSend event execution happens when other launch event(s) are running on an appointment. In this case, there is a scenario where an event may be cancelled when another event is called, and it creates a pop-up for the user like the following:

2024-12-20 15_22_04-agent-surgery (Channel) - Next - Slack.png


This is not directly caused by the FortiDLP Agent, but may depend on the events that have occurred and their timing. Users can proceed by selecting the 'Don't Send' option and re-attempting to send the email.

 

58bfec0f.png

The FortiDLP/Outlook communications are detailed as follows:

  1. Microsoft 365 admin informs the Outlook service that the FortiDLP add-in is to be loaded.

  2. Outlook downloads all necessary code from FortiDLP servers to run the add-in.

  3. Outlook communicates with a locally hosted FortiDLP proxy on port 13243.

  4. The proxy communicates with local thr FortiDLP agent to generate a verdict on sending the email.

  5. The agent receives updates from the FortiDLP platform every 5 minutes about policy updates and configuration.

  6. The FortiDLP agent provides a verdict to allow email to be sent based on existing policy configuration.

  7. The proxy sends the verdict response back back to the hosted Outlook add-on.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT