Getting Started
How To Activate Your USS Account.
Dashboard Walk Through.
Getting Started with Web Security
Getting started with Cloud Application Security.
Getting started with Email Security
Getting started with Security Awareness Training
Getting Started with Posture Management.
Getting Started with Compliant Email Archive (CEA)
Common Support Questions
Email Security Common Problems
Identifying Spoofed Emails
DMARC Fail: Alignment reporting
Web Security Common Problems
USS Agent failing to register with a USS Tenant
Allow partial websites/specific YouTube videos
Gateway failing to join the domain - the address handle that was given to the transport was invalid
Feature Control Safe Search blocking content.
Gateway proxy authentication pop-up login dialog
Bypasses not applying
USS Gateway IP changes unexpectedly
What information is needed to log a support ticket.
TrustLayer Support Bot
Analytics
Activity Reports
Charts
Schedules
Data retention periods
Admin Auditing
Settings
How to Provision a Tenant
Licenses
Notifications
Branding
Cloud App. Security (CASB)
Knowledge Base
Managing Sanctioned Apps
Events not arriving for Office 365 Onedrive or Sharepoint
Overview
App Catalog
API Integrations
App Catalog List
Cloud Multi-factor authentication (MFA)
Managing an MFA lock-out
Disabling SMS as a second factor for 2FA
Count how many users are in an AD group
ADFS Login not being intercepted for MFA
Configure FortiGate to use PAP for Challenge-Response
Quick Start
MFA - Rules Engine Concepts
Authentication Client (server)
Authentication App (enduser)
MFA - Product Configuration
Third Party Guides
Configuring Windows Logon Protection
Configuring RADIUS Protection
Deploying the Cloud MFA Authentication App
Configuring RD Web Access using IIS Website Protection
Products not supporting RADIUS Challenge-Response
Configuring AD FS Protection
Compliant Email Archive (CEA)
Admin Guide
CEA - Updating Company Information
CEA - Configuring Outbound Email Settings and Email Alerts
CEA - Setting Retention Period
CEA - Setting Search Date Limit
CEA - Configuring Advance Company Settings
User Guide
CEA User Guide
Viewing and Managing History in CEA
Using the CEA Outlook Add-in
How to access the CEA as a User
Viewing and Managing Spaces in CEA
Managing Deletion Requests from CEA
Installing the Outlook Add-in for CEA
Legal Hold in CEA
Authorised Delete in CEA
Viewing and Managing CEA results
Google Workspace
Configuring Google Workspace OAuth and Service Account
Integrate Gmail with a CEA
Ingestion
CEA - Uploading Email Archives to CEA via AWS S3
CEA - Data storage explained
Compliant Email Archive Quick Start Guide
How to calculate incoming and outgoing emails for mailboxes on Exchange on Prem.
Understanding Data Guardians
Configuring journaling on Exchange 365
Configuring authentication with O365 via OAuth
Ingest mail via Mailbox Reader with MSGraph
Configuring an Impersonation Account
CEA - Forward to Inbox feature.
Assigning delegation via OAuth with User Directory
Compliant Email Archive - LDAP Configuration
Configuring journaling for Exchange and Office 365
CEA - Configuring a local user account
Re-enabling Outlook Homepage Tab
Ingest mail via Mailbox Reader for Exchange 2013 - 2019
End User Email Archive Authentication with ADFS
Email Security (EMS)
Email Security Configuration
EMS - Message Rules
Connection Rules
Custom rule Data
Global Quarantine
Personal Quarantine
Spam Deny List
Spam Safe List
Mailboxes
Group Management
EMS - Product Configuration
Configuration Recommendations
How to avoid multiple disclaimers being added when forwarding or replying to emails
Executive Tracking
Nearby Domain Rule
Configuring TLS encryption
LinkScan: on-demand URL protection
Configure outbound DMARC
Configure outbound DKIM
How to Prefix a banner to inbound emails
Identify Safe Listed emails in Email Activity
Executive Tracking with Subject
IP Geolocation Connection Rule
Display Name Detection
How to configure Authenticated Received Chain (ARC) Inbound
Configure Conversation Activity
How to use the Domain Name Detection rule
Empty Body Detection
How does DMARC work?
Reject oversized emails
MX records and IP addresses
MX records and IP addresses for all regions
MX records and IP addresses for EU customers
MX records and IP addresses for USA customers
Office 365
Post Delivery Email Deletion (Retract)
Configure Office 365 for EMS
Safelisting Email Security IP addresses in Office 365
Configure Inbound mail on Office 365 to reject non-EMS emails.
Managing DNS in Office 365
Example Rules
Digest generation and Quarantines
Blocking emails from hacked Gmail accounts
Stop specific users from receiving Word documents
Detect credit card numbers in an email
Disable spam filtering for specific mailboxes
CoreService2 Anti-Spam Classifications
CoreService filter classifications
Configure GMail using Google Workspace for EMS
Configure outbound email for Exchange 2007/2010
Configure outbound email for Exchange 2016
Bulk Email & Fair Usage
Queue retention and retry times
Personal Safe Lists and Personal Deny Lists
Reject message due to message “550 5.1.8 sender denied”
Email Sandbox - Supported file types
[Marketing Medium] or [High Medium] prefixed to the subject of mails
DMARC Failure Reporting
What happens when my Email Security license is suspended or deleted?
Example Spam Digest or Quarantine Report
How to onboard users into the End User Portal
Cisco Fixup Protocol
Adding images to email disclaimers
Reject Top Level Domains
Adding an alias to a primary mailbox
Temporary Server Error
Unable to Relay error on outbound email
Notify Recipient/Sender Actions
Reject Disabled user accounts (mailboxes)
DLP Dictionaries
Activate the Quarantine Portal for Spam Digest users
DMARC Abuse Report received even though it passes DMARC
Unable to forward emails from Microsoft 365 accounts
How to use Custom Rule Data (formerly Dictionaries)
HTML attachments
How to block double extension filenames
Manage Mailboxes using the API
Email Security: Best Practice Guide
How to work with System Locked rules
How to detect simplified Chinese character sets
Placeholders for inserting message data into actions
Creating Custom Digests
Advanced Email Sandbox - Overview
Redirect emails to a different address
Connector Mode Setup
How to add comments in Regex
Configuring MTA-STS and TLS-RPT (Inbound)
QR Code scanning
Outlook Plugin
How to Report Spam and Phishing Emails via the Censornet Outlook Plugin.
Outlook Add-in V2
Installing the Outlook add-in for Email Security
Outlook add-in is not the newest version
Upgrade Outlook Add-in for reporting spam and phishing email
Securemail (add-on)
SecureMail concepts explained
Configuring SecureMail
Using the SecureMail dashboard
Email Security Troubleshooting
Reporting spam or false positives
Insufficient system resources message on inbound email delivery
Outbound Delivery error: 550 Unable to relay
No Valid MX Record NDR message
Why do I see No SMTP transport in Email activity?
Bypass Email Security for Forwarded Addresses on Exchange Online
Email Security: Quick Start for Microsoft 365.
Email Security: Quick Start for Connector Mode with Microsoft 365.
Email Security: Quick Start
Email Security: Quick Start for Google Workspace
EMS - Default Rules
General
What's new ?
Understanding Product Usage
Service IP addresses and ports
End of Life
Supported Browsers
IDaaS
Configuring Microsoft Azure as an Identity Provider
Legal
Introduction
Privacy Policy
Master Services Agreement (MSA)
Standard Contractual Clauses (SCCs)
Website Usage and Cookie Policies
Terms for Support Services (SLA).
Log Streaming
Log Streaming Overview
Log Streaming to Microsoft Sentinel
Log Streaming record format
Log Streaming to Rapid7 InsightIDR
Log Streaming to Amazon S3
Log Streaming to Google Cloud Storage
Log Streaming for Splunk Enterprise or Cloud
Log Streaming to Sumo Logic
Product Settings
Administrators
Single Sign On
Active Directory and Entra ID
AD Connect software
Roles (RBAC)
Keyword Lists
Devices & Groups
Active Directory Synchronisation Explained
Active Directory Object Synchronisation
Account Password and MFA
Role Builder
Granting access to synchronise Entra ID shared mailboxes
Add the Exchange Online API permission to an existing AAD connection
Verify that Azure AD permissions are granted for Shared Mailbox sync
Google Workspace synchronisation
Posture Management
Posture Management Overview
Posture Management Dashboard (Homepage)
Connectors
Posture Management Scanning
Download Posture Management Report Data.
Posture Management Activity and AI Remediation
Alerts
Controls Management
AWS Onboarding Guide
Google Cloud Platform Onboarding Guide
Microsoft 365 Onboarding Guide
Microsoft Azure Onboarding Guide
Salesforce Onboarding Guide
Configuring Microsoft Teams alerts
Upgrade Notice
USS Connector Onboarding Guide
Multiple Microsoft 365 Connectors
Posture Management AI
Security Awareness Training (SAT)
SAT - User Guide
SAT - Dashboard
SAT - Dashboard - Dashboard Overview
SAT - Dashboard - Your Courses
SAT - Dashboard - Activity Timeline
SAT - User Search
SAT - Dashboard - Most Clicked Simulations
SAT - Using the Sim Creation Tool
SAT - Journey Builder
SAT - Collections
SAT - Content Packs
SAT - Custom Landing Page
SAT - Email Customisation
SAT - Hierarchical Tenancy Management.
SAT - Multi-factor authentication for Email
SAT - Custom Email Domain
Safelisting
Allow SAT Domains for EMS customers
SAT - M365 Masked URL Update 06/2026
SAT - Create a Mail Flow Connector for SAT Delivery to Office 365.
SAT - Assets
SAT - Comms Template for Microsoft.
SAT - Comms Template for Google.
Course Overviews
Cyber Hints and Tips
SAT Troubleshooting
How do I reset my SAT password?
SAT - Reports data not showing.
How to allow download of images within emails
SAT Course video do not load.
Display simulation images within Outlook using PowerShell.
SAT - Logs
How do I Access the SAT Portal as a New User via Email?
Change Log - SAT
Web Security (WS)
Web Security Configuration
WS - Rules Engine Concepts
WS - Filter Rules
Feature Control Rules
Browser Categories
Custom URLs
Bypass Categories
Deployment Section.
Agent Configuration Profiles
Unblock Requests
Web Security: Product Configuration
Prevent Law features for UK organisations
USS Agents
USS Agent for Windows
Deploying the USS Agent for Windows
Deploying via Wizard
Deploying via Startup/Shutdown script
Deploying the Windows agent via a custom MSI
Deployment via GPO
Deploying USS Windows Agent via Microsoft Intune
Command-line parameters for the USS Agent for Windows.
Installing the USS Agent for Windows SSL certificate in Firefox.
Deploying the USS agent for Windows via Microsoft SCCM
Changelog - Windows Agent
Configuration options for the Windows agent type
Download Microsoft Windows agent
Requirements for the USS Agent for Windows
Processes used by USS Agent for Windows
USS Agent for MacOS
Deploying the USS Agent for Mac OS X
Install - Deploying the USS Agent for Mac OS X via Wizard.
Command-line parameters For the USS Agent for Mac OS X
How to deploy the SSL Certificate to a macOS device.
Deploying the USS Agent for Mac OS X via JAMF
Requirements for the USS Mac OS X agent
Changelog - MacOS Agent
Download macOS Agent
Configuration options for the Mac OS X USS agent.
WS - Deploying USS Mac Agent via Microsoft Intune
USS Agent for Chromebook
Deploying the USS Agent for ChromeBook
Deploying Chromebook agent via Google Admin console
Requirements
Changelog - Chromebook Agent
Download Chromebook agent
Configuration options for the USS Chromebook agent.
USS Gateway
Deploying the USS Gateway
USS Gateway - Requirements
Installation of the USS Gateway
Getting started Guide for the Gateway Agent.
Installing the USS Gateway on Microsoft Hyper-V
Deploying Web Browser proxy settings for the USS Gateway.
Migrating the SSL intercept certificate to a new gateway
Preparing the USS Gateway for use with a load balancer
Client Deployment options for explicit proxying to the USS Gateway.
Configuring USS Gateway to work with LoadBalancer.org software load balancer
Set up Guide for Edge Nexus ADC and Censornet USS Gateways
Third Party Load Balancer Guides
Change the default listening port for the USS Gateway proxy
Installing an SSL Certificate on iOS 13 onwards.
WS - How portal mode works on the USS Gateway
USS Gateway Configuration
Authentication & Identification
Network
USS Gateway Time & NTP Settings
USS Gateway System Settings
USS Gateway Advanced configuration
Configuration options for the USS Gateway agent.
USS Gateway Charts
Download Gateway Virtual Machine
Changelog - USS Gateway.
Hosted Mobile Gateway (WS)
Deploy the Hosted Gateway Cert for iOS devices via inTune.
WS - USS Mobile App Deployment via Intune for Android — Personal / BYOD Deployment
USS Mobile app deployment via Intune for Personal / BYOD Deployment (Unsupervised)
Deploying the USS Mobile Agent via Intune (Fully Managed / Supervised Device)
Web Security Troubleshooting
USS Mac OS X Agent Troubleshooting
USS Mac OS X Agent Log File Storage
Collecting debug information - USS Agent for Mac OS X
Processes used by the USS Agent for Mac OS X
USS Agent for Mac OS X Tray icon status codes.
Microsoft Teams Bypass Exception list on mac OS
Safari 17 Proxy Exceptions limit on a USS Mac OS X Agent.
USS Windows Agent Troubleshooting
How to disable Device Guard or Credential Guard
USS Window Agent Tray icon status codes
Temporary files generated by the endpoint agent software
USS Windows Agent Log File Storage
Incompatibility with nmap based products such as Wireshark
Collecting debug information - USS Agent for Windows
Using USS Windows Agent Web Security with Sophos
Windows agent - force download of anti-malware database
Change the default USS Windows agent configuration poll time.
USS Gateway Troubleshooting
Regular Gateway server maintenance
Accessing the USS Gateway Command Line
Resetting the Ubuntu Password To Log Into Gateway Command Line
Captive Portal on Samsung Devices
"The Requested Content Was Blocked" Error Message on a USS Gateway
Interception of iOS and Android apps (SSL Pinning)
Using an intermediate CA signed by Windows DC root CA
Updating the USS Gateway
Upgrading the USS Gateway from 20.04 LTS to 22.04 LTS.
Importing an SSL Certificate into the USS Gateway
Collecting debug information - USS Gateway
Adding a Static Route on a USS Gateway.
Chromebook Allowlist USS Gateway Proxy
Disable QUIC in Chrome Browser
Take a Packet Capture From the USS Gateway Command Line.
Check for the presence of a system proxy user
USS Gateway failing to install
ERR_CERT_HAS_EXPIRED_ Digicert certificate expiry 2023
How to add a Static Route to the USS Gateway
CVE-2020-15778
YouTube Safe or Restricted mode enforced by DNS on a USS Gateway.
How to renew Certificates on the USS Gateway
Troubleshooting Web Security Filter Rules.
How to capture a HAR file
Discovering Stale Agents via API
Web Security - Filter Rule Simulation
How to identify if a Bypass is affecting Web Security Filter Rules.
Performing a URL Lookup
Gateway Portal
How to use the Gateway Portal - iOS
Bypassing Office 365
Unclassified / Uncategorised Site Processing
TrustLayer Web Filtering Policy and Approach for Education
List of domains to bypass apps for SSL Interception on the USS Gateway.
Blocking Embedded Games in Google Search
MIME Categories and Types
How to submit a URL reclassification request
What happens when my Web Security license is suspended or deleted?
SSL/TLS Strict Mode blocked ciphers
Export Agents using curl script
Custom JSON links for Agent Profiles
Custom URL parsing and overlapping patterns
Global Web Filtering Coverage
Web Categories List
Fair Usage Policy for Web & CASB (Inline)
Web Security: Best Practice Guide
All Categories > Compliant Email Archive (CEA)
34 articles
5 articles by 1 author
10 articles by 1 author
2 articles by 1 author
1 article by 1 author
The Compliant Email Archive (CEA) captures and stores every message sent or received in a separate, secure, tamper-proof database in the cloud. Archived messages are de-duplicated, compressed, indexe…
Updated 3 weeks ago
This guide is designed to help configure the Compliant Email Archive product. Accessing the Compliant Email Archive. To access the Compliant Email Archive (CEA), navigate to Security Modules , then s…
Updated 7 months ago by admin
This guide shows you how to create a PowerShell script for Exchange Server On-Prem that totals the number of incoming and outgoing mailboxes over the last 31 days. Explanation: Date Range: The script…
Updated 1 year ago by admin
The Email Archive system has a powerful feature known as Data Guardians. Data Guardian personnel watch over the usage and rights of access to the Email Archive. A Data Guardian may be, for example, t…
Updated 6 years ago by admin
This article describes how to configure a send connector and a journaling rule within Microsoft M365. This KB covers Microsoft's recent change where Journaling is configured within their GUI. Getting…
This document describes how to configure OAuth for user authentication with Office 365 accounts. Video Guide.. Below is a video guide on how to configuring authentication with O365 via OAuth.. Step-b…
Updated 11 months ago by admin
Ingest mail via Mailbox Reader with MS Graph. This method has replaced the legacy EWS method found in this KB Article.. Log in to the Email Archive as an Administrator and navigate to Mailbox Reader…
Updated 2 months ago by admin
This article describes how to configure an Impersonation Account for Office 365, Exchange 2013 & 2016.. Why do I need an Impersonation Account? An impersonation account has elevated rights to imperso…
Updated 3 weeks ago by admin
One of the features that CEA supports is the ability to forward an email within the CEA environment to a user's mailbox, both internally and externally. This feature requires DKIM records to be creat…
Updated 8 months ago by admin
This document describes how to use the User Directory feature within the Compliant Email Archive product for tasks such as assigning delegation via OAuth. Log in to your Email Archive system as an Ad…
Updated 2 years ago by admin
To perform this configuration you will need to log in to the Compliant Email Archive product as an administrator user. Ensure LDAP/S is working on your Active Directory environment before attempting…
This article describes how to configure a send connector and a journaling rule within Microsoft Exchange and Office 365. Getting email into the Email Archive is the main step. “Journaling” is the com…
This article describes how to configure a local user account within the Email Archive system. The Email Archive system supports 3 local user types that can be created by an Administrator user: Admini…
Updated 2 weeks ago by admin
The following guide can be followed to re-enable the "Home Page" tab within Outlook Folder properties. Download Guide.
To perform this configuration you will need to log in to the Compliant Email Archive product as an administrator user. Please contact your Service Provider for the public IP addresses used by the Com…
This document is a guide to assist the Email Archiving administrator with configuring OAuth for end user authentication against on-premise Microsoft Active Directory via Active Directory Federated Se…
Updated 4 years ago by admin
Powered by HelpDocs (opens in a new tab)
