topic Re: Blocking Phishing Emails in General Topics

Blocking Phishing Emails

Di_Junior — Wed, 11 Jul 2018 12:41:50 GMT

Dear Mates,

I would like to know if there is any Checkpoint product/solution than can help to protect against or block phishing emails trhough the corporate email addresses? Is it appropriate to block phishing emails at the Exchange Server level or at the Firewall level?

Thanks in Advance

Re: Blocking Phishing Emails

PhoneBoy — Wed, 11 Jul 2018 13:41:26 GMT

SandBlast Agent has a "Zero Phishing" feature.

This is done on the endpoint, which protects against many different phishing vectors.

It also works when the user is not on premise as well.

Video Link : 6534

Re: Blocking Phishing Emails

Nüüül — Wed, 11 Jul 2018 13:46:21 GMT

Hi,

imho it is in general better to have a security layer in front of the exchange server.

Whether you use checkpoint email security blade or some other vendor/solution (dedicated appliance) depends on your requirements and environment.

But phishing mails are (afaik) difficult to detect for anti spam, have look at the link below, with some more informations and pointing to SandBlast.

Phishing scams target everyone – even us! | Check Point Blog : Check Point Blog

Cheers,

Daniel

Re: Blocking Phishing Emails

Shehan_Wickrama — Thu, 27 Sep 2018 04:40:41 GMT

Hi is there a way to block phishing emails on the firewall level without an agent?

Re: Blocking Phishing Emails

Nüüül — Thu, 27 Sep 2018 04:58:14 GMT

You mean without configuring the firewall as Mail Transfer Agent?

No.

Checkpoint has to be configured to process EMails. That´s what the MTA is doing then.

That´s not an agent you install somewhere.

Re: Blocking Phishing Emails

PhoneBoy — Thu, 27 Sep 2018 05:13:27 GMT

In the near future, our MTA will support the AV blade, which will allow for scanning the reputation of links in emails.

Please watch this SK for updates: Mail Transfer Agent Update - What's New

But again, a gateway solution will only protect clients behind it.

The Zero Phishing features of SandBlast Agent protects the users wherever they are and regardless of which email inbox they access (work or personal).

Re: Blocking Phishing Emails

Shehan_Wickrama — Thu, 27 Sep 2018 06:11:13 GMT

Hi Thank you for replying.

We have configured Checkpoint as a MTA and wants to know whether we can block Phishing emails without installing an endpoint agent. Is this Possible?

Re: Blocking Phishing Emails

Shehan_Wickrama — Thu, 27 Sep 2018 06:12:42 GMT

Hi Thank you for replying.

So as for now there is no way to block phishing emails from the gateway level without installing an agent, right?

Re: Blocking Phishing Emails

PhoneBoy — Thu, 27 Sep 2018 13:38:16 GMT

Today? No, but is in the near term plans.