Is it possible to emulate the POP3 traffics. Considering the SB appliance is sitting inline mode.
POP3 is not currently supported.
It's best practice to emulate the email before it hits the POP3 server in any case.
I think IMAP makes sense. As it may also be used to upload files or move them around.
And to be honest. A lot can happen between your email being received and the email being retrieved. In the space of a few hours we may learn a lot more about files.
So we should not discard POP and IMAP too easily.
Even so, Threat Emulation will only emulate a given file once, so seeing it again with Threat Emulation won't do any good.
Afaik there is currently an ongoing development to support POP3 and IMAP on the Small Business Appliances 14xx.
Check with your local CP SE for more infos.
Retrieving data ...