Email security settings¶

The Settings tab is used to manage real-time email security settings.

Select Enable real-time email security to enable the following email security settings:

• Malware in email attachments
• Phishing in emails
• Quarantine emails with attachments of these specified file types
• Specify the default email quarantine folder

Malicious email attachments¶

All incoming emails are immediately scanned for attachment files that may be malicious. Email attachment scans support the following archive file types:

• .zip
• .rar
• .7z
• .tar
• .gz

Phishing emails¶

Emails sent between users of the same domain are examined for both malware and phishing. Phishing tickets are only created if the domain or email address is not included in the Allowlist.

Quarantined email attachments by file type¶

Admin users can trigger an email security ticket by adding a list of blocked email attachment file extensions. Select Quarantine emails with attachments of these specified file types (by default, On). Add and remove file attachment extensions using the File types list.

The list of default file extensions is:

• .exe
• .dll
• .bat
• .vb
• .js
• .com
• .iso
• .chm
• .lnk
• .htm
• .html

Select Reset to re-add the list of default extensions.

Incoming emails containing attachments of the file types defined are automatically quarantined, and an Email Phishing ticket is created with a finding of Blocked attachment type:

To learn more about types of sensitive data to monitor for access and exposure in email sharing, see Data governance.

To learn more about types of email tickets, see Ticket types for email.

Specify the default email quarantine folder¶

You can specify the default folder where phishing emails are stored for Microsoft 365 and Gmail. The options are:

• Dedicated Suspected folder: This is selected by default. All quarantined emails are stored in the dedicated Coro Suspected folder.

• System trash folder: All quarantined emails are stored in the system (Microsoft 365/Gmail) trash folder instead of the dedicated Coro Suspected folder.

To set the default email quarantine folder:

1. Select Control Panel from the toolbar:

   

2. Select Email:

   

   The Email page is displayed.

3. Select the Settings tab.

4. Select an option listed under Quarantine folder:

   

All quarantined emails are now stored in the selected folder.