topic Re: what is the difference between MTA and Threat Extraction? in General Topics

what is the difference between MTA and Threat Extraction?

Thecoder — Thu, 21 Jun 2018 10:30:05 GMT

Hello

i want to learn difference between MTA and Threat Extraction. is mail attachment exemainig or not if MTA is only enabled? and what is the difference if MTA and Threat Extraction opened both?

Thanks

Re: what is the difference between MTA and Threat Extraction?

PhoneBoy — Thu, 21 Jun 2018 17:24:02 GMT

For Threat Extraction to work on email, MTA is required currently.

Without enabling MTA, Threat Extraction only works for HTTP and HTTPS (when HTTPS Inspection is also used).

Re: what is the difference between MTA and Threat Extraction?

Thecoder — Fri, 22 Jun 2018 06:35:02 GMT

without enabling Threat exraction, MTA checks mail content and attachment or not?

Re: what is the difference between MTA and Threat Extraction?

Huseyin_Rencber — Fri, 22 Jun 2018 11:30:13 GMT

Before you enable the Threat Extraction blade, you must deploy the gw as a MTA. But without enabling threat extraction and threat emulation you can not configure a gateway as a MTA. Deploying gw as a MTA is second step of enabling Threat Emulation/extraction. To configure MTA, enable either Threat Emulation/Extraction blade (available since R77), or Anti-Spam & Email Security blade. Without threat ext anti-spam&email sec checks mail content and attachment

Re: what is the difference between MTA and Threat Extraction?

Thecoder — Mon, 25 Jun 2018 08:16:54 GMT

we enabled MTA (without Threat extraction) and Threat emulation.according to you are mail attachments without Threat extraction being reviewed or not?

Re: what is the difference between MTA and Threat Extraction?

Huseyin_Rencber — Tue, 26 Jun 2018 06:25:36 GMT

Yes, threat emulation will check attachments.

Re: what is the difference between MTA and Threat Extraction?

Thecoder — Tue, 26 Jun 2018 07:38:16 GMT

if threat emulation checks the attachment, why we need threat extraction?

Re: what is the difference between MTA and Threat Extraction?

Huseyin_Rencber — Tue, 26 Jun 2018 07:51:06 GMT

The Threat Extraction blade extracts potentially malicious content from files before they enter the corporate network. To remove possible threats, the Threat Extraction blade can create a simpler version of the file in PDF format. The Threat Extraction capability provides a safe version of potentially malicious content to users. This way users can be assured they are protected from the malware.

Re: what is the difference between MTA and Threat Extraction?

Thecoder — Tue, 26 Jun 2018 08:38:42 GMT

Thanks for ur answers