Knowledge Base

47 articles

Configure GMail using Google Workspace for EMS

To successfully add GMail using G Suite and configure Email Security (EMS), you will need to perform three steps: Configure EMS for GMail using G Suite accounts. Configure Inbound mail on GMail using…

Updated 3 years ago by admin

Configure outbound email for Exchange 2007/2010

It is important that you configure your Exchange connectors to send outbound email out through the MailSafe service. This ensures that both your outbound traffic is scanned and your traffic is profil…

Updated 6 years ago

Configure outbound email for Exchange 2016

It is important that you configure your Exchange connectors to send outbound email out through the MailSafe service. This ensures that both your outbound traffic is scanned and your traffic is profil…

Updated 6 years ago

Bulk Email & Fair Usage

Clients that make use of Email Security for sending outbound email must respect the terms and conditions below, pertaining to bulk email and fair usage. If you wish to send bulk email, customers and…

Updated 1 week ago

Queue retention and retry times

Email Security has a set of standard retry and retention times, which dictate how long an undelivered email will remain in the email queue. If a connection results an error message in the 5xx range,…

Updated 3 years ago

Personal Safe Lists and Personal Deny Lists

As well as the Global Safe Lists and Global Deny Lists , Each Email Security user has access to their own Personal Safe List and Personal Deny List as well. You can grant users the ability to view th…

Updated 2 weeks ago

Reject message due to message “550 5.1.8 sender denied”

The Email Security (EMS) product will generate this response from the Deny rule at the connection level and is enforced through Connection Rules. This rule looks at the company and personal deny list…

Updated 2 years ago by admin

Email Sandbox - Supported file types

The following file types are supported by the Email Sandbox product. File detection techniques are used to determine the real type of the file even if the extension has been manually changed. The max…

Updated 2 years ago by admin

[Marketing Medium] or [High Medium] prefixed to the subject of mails

The Email Security (EMS) product detects marketing emails and has three levels of detection. These are: High Reputation Marketing Typically, email campaigns issued from a professional and known routi…

Updated 5 years ago by admin

DMARC Failure Reporting

If you receive an abuse report based on your DMARC DNS options, you'll be directed to this article. DMARC messages show a pass or a failure for each component, depending on your DMARC reporting optio…

Updated 5 years ago

What happens when my Email Security license is suspended or deleted?

The following article describes the behaviour if your Email Security license is suspended or deleted. License Suspended. Mail flow will continue however any customer defined or standard rules will be…

Updated 2 years ago by admin

Example Spam Digest or Quarantine Report

If Digests have been enabled, the Email Security product will email end-users a summary of their personal quarantine directly to their inbox. It is possible to change the branding of the Digest email…

Updated 2 weeks ago by admin

How to onboard users into the End User Portal

The End User Portal is a minimal version of the Email Security administrator dashboard that allows end users to manage their own email quarantine, safe and deny lists, and any other relevant services…

Updated 4 years ago by admin

Cisco Fixup Protocol

SMTP inspection engine (also known as a "fixup" in the Cisco docs) is fairly notorious for interfering with email transfer and preventing successful delivery. You may even experience mysteriously mis…

Updated 5 years ago by admin

Adding images to email disclaimers

Email disclaimers can consist of plain text or HTML. A disclaimer can contain an image but only if it is referenced as an absolute URL using a standard HTML <img> tag. To insert an image into a HTML…

Updated 5 years ago by admin

Reject Top Level Domains

This article describes how to reject email from top level domains (TLD's) using a connection rule and Custom Rule Data. Consider also using the "Sender IP Geolocation" condition in a Connection Rule…

Updated 5 years ago by admin

Adding an alias to a primary mailbox

The Email Security product supports adding aliases to a primary mailbox so that email destined for variants of the primary mailbox address can be accepted through the DHA rule. An alias should only r…

Updated 5 years ago by admin

Temporary Server Error

If you are using Email Security but you are not receiving emails to your Exchange 2013 server and you see the following error in the Server Logs: 451 4.7.0 Temporary server error. Please try again la…

Updated 5 years ago by admin

Unable to Relay error on outbound email

All outbound emails are authenticated in one of two ways: Server based. User based. . If you get the error <server>.scanscope.net #550 Unable to relay it means that authentication has not been config…

Updated 2 years ago by admin

Notify Recipient/Sender Actions

The Notify Recipient and Notify Sender actions can be used in Message Rules to send a notification to the recipient, sender or a specific address. For example, you may want to notify a recipient that…

Updated 2 years ago by admin

Reject Disabled user accounts (mailboxes)

This article provides a technique to reject disabled user accounts (i.e. mailboxes or email addresses). Rejecting disabled accounts will ensure these mailboxes are excluded from billable Email Securi…

Updated 5 months ago

DLP Dictionaries

The Email Security product provides a number of built-in dictionaries to assist organisations with Data Loss Prevention (DLP). The dictionaries are used to detect potentially high risk data egressing…

Updated 2 years ago by admin

Activate the Quarantine Portal for Spam Digest users

The Quarantine Portal is an isolated environment that any recipient of a Spam Digest email can use to manage quarantined messages, without needing to log in to the End User Portal. Whilst the End Use…

Updated 2 years ago by admin

DMARC Abuse Report received even though it passes DMARC

This article explains why you may receive a DMARC abuse report even though the message passes DMARC. You receive the follow message to the email address configured for failure reporting: This is an e…

Updated 4 years ago by admin

Unable to forward emails from Microsoft 365 accounts

If you are having issues with forwarding emails from Microsoft 365 accounts and you are receiving the following errors, this article discusses possible solutions depending on your configuration. ‎550…

Updated 6 months ago

How to use Custom Rule Data (formerly Dictionaries)

This article explains how to use the Custom Rule Data feature of Email Security. Custom Rule Data entries are used in Message Rules to detect or insert text as part of conditions or actions. They can…

Updated 2 years ago by admin

HTML attachments

A low-level trend has been identified where an email containing very little content and an HTML file attachment is delivered to the recipient. These HTML files are malware and zero day. This article…

Updated 3 years ago by admin

How to block double extension filenames

To block double extension filenames like.exe.html you can create the following Message Rule. Navigate to Products , Email Security and then Message Rules. Click the + button to create a new rule. Add…

Updated 3 years ago by admin

Manage Mailboxes using the API

This article describes how to connect to the Platform API and manage Mailboxes as shown in the Email Security -> Mailboxes section. You will need: an admin user credential that has been assigned a Cu…

Updated 6 months ago by admin

Email Security: Best Practice Guide

This guide outlines best practices for Email Security (EMS), which are based on our experiences with many customers and are in line with other industry best practices. The following configuration rec…

Updated 2 weeks ago by admin

How to work with System Locked rules

Locked rules, identified with (Locked) in the rule name, are rules that cannot be disabled or removed from the Message or Connection Rules list. By default, there are three Locked Connection rules wh…

Updated 5 months ago

How to detect simplified Chinese character sets

This document explains how to detect simplified Chinese character sets in email messages using the Email Security rules engine. Other character sets can be used for detection. For more details on the…

Updated 3 years ago by admin

Placeholders for inserting message data into actions

The following placeholders are supported in Email Security Message Rule actions, such as Prefix to Subject or Notify Recipient (Subject or Message). The placeholder will be replaced with the actual d…

Updated 5 months ago by admin

Creating Custom Digests

Custom digests can be applied to your Email Security account. There are a number of customisations that can be made including removing all clickable links, limiting features and changing styles. It i…

Updated 5 months ago

Advanced Email Sandbox - Overview

The optional Advanced Email Sandbox protects against today’s evasive zero-day threats by providing a highly scalable and powerful environment to run in-depth, sophisticated analysis of unknown or sus…

Updated 4 months ago by admin

Redirect emails to a different address

Email destined for specific recipients can be re-routed (redirected) to an alternative address, using the Re-Route To rule action within Message Rules. Example 1 - simple re-route. The following exam…

Updated 5 months ago by admin

Connector Mode Setup

Connector Mode is an alternative mail delivery method to using DNS based MX record redirection. It provides a quick and easy onboarding process for the Email Security product and provides additional…

Updated 1 week ago by admin

How to add comments in Regex

This article explains how you can use comments in Rule Regex to comment on entries within the regex. Important Comments do not function within Custom Rule Data, and will invalidate any rule it is bei…

Updated 3 months ago

Configuring MTA-STS and TLS-RPT (Inbound)

What is MTA-STS? MTA-STS stands for Mail Transfer Agent Strict Transport Security, an email security standard that encrypts by enforcing TLS inbound emails to your domain. It works by requiring exter…

Updated 5 months ago

QR Code scanning

The Email Security product has the ability to scan QR Codes when processing email in addition to on-demand scanning of URLs from email using the LinkScan service. This helps to prevent QR code phishi…

Updated 2 weeks ago by admin