Email Security

Three basic building blocks enable complete email protection for your company and your very attacked people (VAP):

Proofpoint E-Mail Protection
Proofpoint Email Protection helps you secure and control inbound and outbound email with an easy-to-use solution. You can fully protect your employees, data and your entire organization from today's threats, whether impostor emails, phishing, malware, spam or bulk emails. Dynamic Reputation, a dynamic reputation analysis, is a sender reputation check service developed by Proofpoint. It continuously evaluates global IP addresses to determine whether email connections should be accepted, rejected or reduced.

Based on Proofpoint's patented MLX machine learning technology, the solution examines and filters millions of possible spam attributes in each email, including email headers and structure, included images, sender reputation and unstructured content in the body of the message. This spam detection reliably prevents spam emails and attachment-based spam, including PDF and image spam. At the same time, new types of spam attacks are automatically filtered as soon as they occur. Proofpoint's cloud-based dynamic update service keeps spam detection up to date at all times and ensures maximum detection.

Impostor emails, known as business email compromise, are particularly popular. Email Protection also recognizes and classifies such targeted, fraudulent emails thanks to the combination of authentication (DMARC), predefined rules and dynamic classification. The technology actively evaluates the sender's reputation for comprehensive protection without additional administrative effort.

Virus Protection also includes a local antivirus scanner that runs on the Proofpoint gateway and filters out all known threats contained in the emails or attachments. The additional Zero-Hour Antivirus is an antivirus engine specially developed by Proofpoint that works independently of antivirus signatures and therefore offers additional protection for your email traffic against phishing.

As a real-time email content filter, the email firewall allows you to define and enforce compliance policies for message content and attachments. You can customize the static filter ruleset to your needs, e.g. by specifying the allowed message sizes or attachments.

In addition, the Smart Search function offers extended e-mail message tracking in real time with forensic and logged analysis for troubleshooting purposes. Message tracking log analytics are quickly consolidated across all Proofpoint systems and indexed for fast searching. The analysis information is also continuously updated so that detailed analysis of any email message can be tracked within minutes via the user-friendly interface.

Targeted Attack Protection (TAP)
With TAP you are always one step ahead of attacks. The innovative approach detects, analyzes and blocks advanced threats before they reach your inbox. This includes not only ransomware and threats transmitted via malicious attachments and URLs, but also zero-day threats, polymorphic malware, manipulated documents and phishing. TAP also detects risks in cloud applications and correlates email attacks with credential theft or other attacks.

TAP's Attachment Defense is used to detect and protect against malware contained in PDF, Microsoft Office and Flash file attachments. During message processing, the Proofpoint Protection Server determines whether a message contains attachments for which attachment defense analysis is supported. If this is the case, a SHA256 hash is calculated for each attachment. For emails with unknown attachments, TAP Attachment Defense then forwards a copy of the attachments to both the TAP sandbox and Palo Alto Networks WildFire Cloud for adjudication. The actual email is withheld until a verdict is reached on the attachment. If a threat is detected in a sandbox, the email is handled according to the rules. All information, both from TAP and WildFire, is collected and organized via the TAP dashboard.

TAP's URL Defense is also used to track and subsequently block clicks on malicious websites without compromising the user experience or other URL filtering technologies. During message processing, URLs are transparently rewritten and forwarded to Proofpoint's cloud-based service. The identified URLs are also sent to the cloud-based sandbox for predictive analysis, which preemptively identifies suspicious URLs based on email traffic patterns. Due to URL rewriting, an additional check of the link takes place at the time a user clicks on the link (click-time defense). It does not matter on which end device the link is clicked, as the URL is permanently redirected to the Proofpoint gateway and thus offers protection for forwarded emails.

Threat Response Auto-Pull (TRAP)
If a malicious email is detected, the detection systems send a warning to the Threat Response System with information about the message. Threat Response then moves the message to quarantine. However, even with the most effective solution, there will always be messages that make it into a user's inbox. The auto-pull function therefore searches for forwarded copies of the message as well as distribution lists of recipients and the message in other inboxes on the same server and also moves these to a quarantine with restricted access. In this way, automation can reduce the workload of the security team and helpdesk staff.

Closed Loop E-Mail Analysis and Response (CLEAR)
A trained employee can be your last line of defense against a cyberattack. With Proofpoint CLEAR, the cycle of reporting, analyzing and remediating potentially damaging emails is reduced from days to minutes. Enriched with our leading cybersecurity threat intelligence solutions and security awareness training, CLEAR can block active attacks with a single click. And by automatically responding to malicious messages, your team saves valuable time and effort. Using the PhishAlarm plug-in, which is installed in your employees' email application, they can report suspicious emails directly. The reported emails are moved to a specially set up mailbox for checking, where they are checked for various parameters by PhishAlarm Analyzer and Proofpoint Threat Intelligence. This makes it easier for the email administrator to check for maliciousness. Clearly malicious emails can then be automatically removed from all mailboxes via Threat Response Auto-Pull.
 

DTS Managed Services
Operating IT security solutions yourself always involves additional resources. As DTS, we support you across the entire scope of IT security. We provide you with the solution components from our certified German data centers, take care of installation, 24/7 operation, the installation of updates and fixes, maintenance and first and second level support (9/5). Our technical experts reduce your workload to a minimum. Of course, we work with you to customize the optimal deployment. Benefit from the unique combination of state-of-the-art IT security solutions and DTS managed services.