I thought my company had our TLS 1.0 project resolved, per this thread: https://success.salesforce.com/0D53A000030pnyw

However, I received an email yesterday that said, "Your org has been identified as having users or integrations still connecting to Salesforce using TLS 1.0 encryption protocol during the month of February."

I re-ran the User report I learned about in the recurring webinar on this topic, and according to it, we did not have any TLS 1.0 logins during the month of February.  (Screenshot attached.)  All of them were TLS 1.2.

Please let me know which is correct -- the email from Salesforce saying that we had TLS 1.0 logins in Februrary, or the Salesforce report saying that we didn't.