Configuration Recommendations

18 articles

How to avoid multiple disclaimers being added when forwarding or replying to emails

If configured, the Email Security rules engine will add the disclaimer (also known as a text banner) to outgoing messages for all or specific domains. If there are many replies to the same message, t…

Updated 10 months ago by admin

Executive Tracking

This Rule detects "whaling" attacks. A whaling attack, sometimes called a "whale phishing" attack or CEO Fraud, is a specific type of phishing attack that targets high-profile employees such as the C…

Updated 10 months ago

Nearby Domain Rule

This Rule compares domains in the email header to your configured domains. It will trigger when domains in the header are very similar to (but not identical to) your configured domains. For example,…

Updated 10 months ago

Configuring TLS encryption

You can use TLS to encrypt the tunnel between sending and receiving SMTP servers. This increases the security of your emails, and makes interception less likely. Email Security provides two options f…

Updated 10 months ago

LinkScan: on-demand URL protection

The reputation of URLs contained in an email is checked at the time of processing using the URL Scanner Rule condition. With LinkScan , further checks are conducted the moment the end-user clicks the…

Updated 10 months ago

Configure outbound DMARC

Email Security provides the ability to participate in DMARC (Domain Message Authentication Reporting and Conformance) for email authentication. Below configuring any DMARC DNS entry, you must ensure…

Updated 10 months ago

Configure outbound DKIM

Domain Key Identified Mail or DKIM verifies that email is from the domain-configured source and has not been changed in transmit. By configuring DKIM outbound it will increase your domain reputation…

Updated 10 months ago

How to Prefix a banner to inbound emails

It may be a requirement within EMS that all external emails are stamped with a banner notifying recipients that the email was received from outside of the business. This is particularly useful to hel…

Updated 10 months ago

Identify Safe Listed emails in Email Activity

By default, EMS will not show and identify safe listed emails in the Actions tab within the Message Details window of the Email Activity report. By creating this rule, it shows clearly in the Actions…

Updated 7 months ago

Executive Tracking with Subject

Our Email Security Threat Detection team has identified a trend in Executive Tracking style emails, that instead of using the Outlook display name, they use the subject line to impersonate users with…

Updated 10 months ago

IP Geolocation Connection Rule

This Connection Rule detects the location of the connecting IP address. It will classify the IP to a country of origin. You can then use the rule to reject certain countries, or to only allow specifi…

Updated 6 months ago

Display Name Detection

This article explains how you can create a rule to detect unusual patterns in the display name; the area that shows who sent the email in most email clients. For example, some spammers will try and c…

Updated 10 months ago by admin

How to configure Authenticated Received Chain (ARC) Inbound

Authenticated Received Chain (ARC) is an authentication system designed to allow an intermediate mail server forwarding service to sign an email's original SPF and DKIM authentication results. To con…

Updated 10 months ago

Configure Conversation Tracking

The Conversation Tracking feature is designed to protect users from impersonation attacks, such as similar external domains, newly observed domains in conversations, and Reply-To email address mismat…

Updated 6 days ago by admin

How to use the Domain Name Detection rule

This default rule, which is disabled by default, is designed to detect external spoof emails that use your company domain within the Display Name (generated by the FROM header) to trick users into be…

Updated 10 months ago by admin

Empty Body Detection

The Empty Body detection feature has been designed to detect empty body (blank) emails. This includes emails such as: Empty bodies (including white space) with or without attachments to the email. Em…

Updated 10 months ago

How does DMARC work?

DMARC (Domain-based Message Authentication, Reporting and Conformance) relies on the established SPF and DKIM standards for email authentication. It also piggybacks on the well-established DNS (Domai…

Updated 10 months ago by admin

Reject oversized emails

Email Security accepts emails up to the size of 50MB inbound or outbound. Should your mail server (Domain Route) not accept this size of message, you can reject the message at the point of SMTP conne…

Updated 10 months ago