Educause Security Discussion mailing list archives

Re: Email Security Product That Supports Customer Entry of Malicious Messages


From: Justin Harwood <Justin.Harwood () CPCC EDU>
Date: Wed, 22 Mar 2017 19:54:27 +0000

Hi Gary,

Are you saying that you want a product that can block the URLs in the emails that your spam filtering solution didn't 
catch and forwarded to your users (without rewriting the emails) mailboxes. That being said, you have emails in users 
mailboxes that have malicious URLs?  If that's the case, I'm not sure if you will find anything like that since the 
mailboxes have the email, and are left to put these IPs/DNS into blacklists on the firewall to block outgoing traffic 
(which doesn't protect your mobile users).

We are looking to buy Proofpoint in the coming months so I was interested in your question.

Sent from my iPhone

On Mar 22, 2017, at 1:59 PM, Flynn, Gary - flynngn <flynngn () JMU EDU<mailto:flynngn () JMU EDU>> wrote:

Hi,

We use Proofpoint and most of the time it works great. It has protected us from major attacks many times.

It's URL rewrite component is missing one feature that would make it much better. As with any blacklist oriented 
security product, some malicious messages get through. Unfortunately, the product does not allow us to teach our 
appliance about those messages so it can block the URL and provide us exposure information.

Is anyone aware of an email security product that supports such a feature?

thanks,

Gary Flynn
JMU IT Security
James Madison University

My brain can handle preemptive and cooperative multitasking pretty well. Parallel processing, not so much.


________________________________

This e-mail, including any attachments, is intended only for the addressee's use and may contain confidential and 
proprietary information. If you are not the intended recipient, you are hereby notified that any retention, 
dissemination, reproduction, or use of the information contained in this e-mail is strictly prohibited. If you have 
received this e-mail by error, please delete it and immediately notify the sender. Thank you for your cooperation.


Current thread: