Security Scanners consuming one time links
- Denny Miller
This issue is for the following features:
Directive Set Links
Approval Links
Customer Satisfaction Feedback Links
If you are noticing that these links are always displaying a warning (despite the approval action completing), the underlying problem may be with the configuration of a security scanner consuming the tokens before opening the link in your web browser.
What happens
When an email link is clicked, some mail hosts containing security scanning tools will access the email links. After the security scanner completes, it will redirect and open the same URL on the users web browser.
This causes one time activation codes to be consumed by the security tool, causing the redirect page to display an error message that ‘The token has already been consumed'.
The most common cause is when the Outlook/O365 Desktop client is used along with ProofPoint SafeLinks. Please check your security tool configuration to ensure links do not get consumed before opening in the web browser.
How to fix
To prevent security scanners from consuming these tokens, these links must be whitelisted.
E.g, See Proof Point documentation for URL whitelisting: https://help.proofpoint.com/Proofpoint_Essentials/Email_Security/Administrator_Topics/Other_Features/Troubleshooting_issues_with_URL_Defense
