Modified Mimecast Policy

I adjusted the Mimecast Impersonation Protect policy to require 3 hits instead of 2 - this fixed the problem.