Configuration Recommendations

16 articles

How to avoid multiple disclaimers being added when forwarding or replying to emails

If configured, the Email Security rules engine will add the disclaimer (also known as a text banner) to outgoing messages for all or specific domains. If there are many replies to the same message, t…

Updated 2 days ago by admin

Executive Tracking

This Rule detects "whaling" attacks. A whaling attack, sometimes called a "whale phishing" attack or CEO Fraud, is a specific type of phishing attack that targets high-profile employees such as the C…

Updated 2 days ago

Nearby Domain Rule

This Rule compares domains in the email header to your configured domains. It will trigger when domains in the header are very similar to (but not identical to) your configured domains. For example,…

Updated 2 days ago

Configuring TLS encryption

You can use TLS to encrypt the tunnel between sending and receiving SMTP servers. This increases the security of your emails, and makes interception less likely. Email Security provides two options f…

Updated 2 days ago

LinkScan: on-demand URL protection

The reputation of URLs contained in an email is checked at the time of processing using the URL Scanner Rule condition. With LinkScan , further checks are conducted the moment the end-user clicks the…

Updated 2 days ago

Configure outbound DMARC

Email Security provides the ability to participate in DMARC (Domain Message Authentication Reporting and Conformance) for email authentication. Below configuring any DMARC DNS entry, you must ensure…

Updated 2 days ago

Configure outbound DKIM

Domain Key Identified Mail or DKIM verifies that email is from the domain-configured source and has not been changed in transmit. By configuring DKIM outbound it will increase your domain reputation…

Updated 2 days ago

How to Prefix a banner to inbound emails

It may be a requirement within EMS that all external emails are stamped with a banner notifying recipients that the email was received from outside of the business. This is particularly useful to hel…

Updated 2 days ago by admin

Executive Tracking with Subject

Our Email Security Threat Detection team has identified a trend in Executive Tracking style emails, that instead of using the Outlook display name, they use the subject line to impersonate users with…

Updated 2 days ago by admin

IP Geolocation Connection Rule

This Connection Rule detects the location of the connecting IP address. It will classify the IP to a country of origin. You can then use the rule to reject certain countries, or to only allow specifi…

Updated 2 days ago

Display Name Detection

This article explains how you can create a rule to detect unusual patterns in the display name; the area that shows who sent the email in most email clients. For example, some spammers will try and c…

Updated 2 days ago by admin

How to configure Authenticated Received Chain (ARC) Inbound

Authenticated Received Chain (ARC) is an authentication system designed to allow an intermediate mail server forwarding service to sign an email's original SPF and DKIM authentication results. To con…

Updated 2 days ago by admin

How to use the Domain Name Detection rule

This default rule, which is disabled by default, is designed to detect external spoof emails that use your company domain within the Display Name (generated by the FROM header) to trick users into be…

Updated 2 days ago by admin

Empty Body Detection

The Empty Body detection feature has been designed to detect empty body (blank) emails. This includes emails such as: Empty bodies (including white space) with or without attachments to the email. Em…

Updated 2 days ago by admin

How does DMARC work?

DMARC (Domain-based Message Authentication, Reporting and Conformance) relies on the established SPF and DKIM standards for email authentication. It also piggybacks on the well-established DNS (Domai…

Updated 2 days ago by admin

Reject oversized emails

Email Security accepts emails up to the size of 50MB inbound or outbound. Should your mail server (Domain Route) not accept this size of message, you can reject the message at the point of SMTP conne…

Updated 2 days ago