Security Scanners consuming one time links

 

This issue is for the following features:

  • Directive Set Links

  • Approval Links

  • Customer Satisfaction Feedback Links

If you are noticing that these links are always displaying a warning (despite the approval action completing), the underlying problem may be with the configuration of a security scanner consuming the tokens before opening the link in your web browser.

What happens

When an email link is clicked, some mail hosts containing security scanning tools will access the email links. After the security scanner completes, it will redirect and open the same URL on the users web browser.

This causes one time activation codes to be consumed by the security tool, causing the redirect page to display an error message that ‘The token has already been consumed'.

Warning displayed when security tool consumes the token

 

The most common cause is when the Outlook/O365 Desktop client is used along with ProofPoint SafeLinks. Please check your security tool configuration to ensure links do not get consumed before opening in the web browser.

 

How to fix

To prevent security scanners from consuming these tokens, these links must be whitelisted.

 

Approvals confirmation page when security tool does not consume tokens