Skip to content

Email security settings

The Settings tab is used to manage real-time email security settings.

Select Enable real-time email security to enable the following email security settings:

Enable real-time email security

Malicious email attachments

All incoming emails are immediately scanned for attachment files that may be malicious. Email attachment scans support the following archive file types:

  • .zip
  • .rar
  • .7z
  • .tar
  • .gz

Phishing emails

Emails sent between users of the same domain are examined for both malware and phishing. Phishing tickets are only created if the domain or email address is not included in the Allowlist.

Quarantined email attachments by file type

Admin users can trigger an email security ticket by adding a list of blocked email attachment file extensions. Select Quarantine emails with attachments of these specified file types (by default, On). Add and remove file attachment extensions using the File types list.

The list of default file extensions is:

  • .exe
  • .dll
  • .bat
  • .vb
  • .js
  • .com
  • .iso
  • .chm
  • .lnk
  • .htm
  • .html

Quarantine emails with attachment file types

Select Reset to re-add the list of default extensions.

Incoming emails containing attachments of the file types defined are automatically quarantined, and an Email Phishing ticket is created with a finding of Blocked attachment type:

Blocked attachment type phishing ticket


Additional file extensions can be added to the File types list.


All activities associated with email tickets are logged in the Activity log.

To learn more about types of sensitive data to monitor for access and exposure in email sharing, see Data governance.

To learn more about types of email tickets, see Ticket types for email.

Specify the default email quarantine folder

You can specify the default folder where phishing emails are stored for Microsoft 365 and Gmail. The options are:

  • Dedicated Suspected folder: This is selected by default. All quarantined emails are stored in the dedicated Coro Suspected folder.

  • System trash folder: All quarantined emails are stored in the system (Microsoft 365/Gmail) trash folder instead of the dedicated Coro Suspected folder.


When the default quarantine folder is changed, quarantined emails are not transferred between folders.

To set the default email quarantine folder:

  1. Select Control Panel from the toolbar:

    Control Panel

  2. Select Email:


    The Email page is displayed.

  3. Select the Settings tab.

  4. Select an option listed under Quarantine folder:

    Email quarantine folder

All quarantined emails are now stored in the selected folder.