Skip to content

Introducing Email Security

Coro's Email Security module simplifies email protection, offering a comprehensive solution from pre- to post-delivery, including encryption services.

Coro guards against a wide range of threats, such as identity spoofing, malware and ransomware injection, malicious embedded links, generic and spear phishing, and email account takeover. Coro can also identify content categorized as spam in email message bodies, headers, and attachments.

API-based email protection

Coro's unique threat intelligence engine scans your protected users' emails using a combination of known malware sources, sensitive data scans, and behavioral analysis to determine indicative threats.

Coro then raises Email Security tickets for identified threats based on a combination of the severity level and your configured email security settings. Tickets specify the type of threat encountered, and can either require admin users to intervene and perform actions, or just disclose how Coro automatically remediated it.

To view the full list of Coro's Email Security ticket types and the corresponding outcomes, see Email Security ticket types.

Coro offers two primary methods for interacting with, and providing protection for, email services in an organization:

API connected protection

Coro provides real-time email threat detection by working with your connected Gmail or Microsoft 365 cloud service through an API connection.

API-based email protection

This API-based approach means Coro can seamlessly interact with your email provider directly without requiring admin users to perform specific configuration for each user. Coro acts on mail activity notifications sent by Google or Microsoft and performs remediation actions as necessary.

Coro's API-based Email Security module is available for Gmail and Microsoft 365 only. To add protection for other third-party email providers, or to learn how you can add additional protection for all email services, see Inbound email gateway.

Inbound email gateway

Coro can be configured to function as a proxy gateway such that all incoming email is routed through Coro before reaching your organization.

Proxy gateway email protection

The primary benefits of this approach are:

  • Coro intercepts malicious emails before they reach your users' inboxes.
  • Coro's email gateway is not limited to Gmail or Microsoft 365 and can work with other third-party email services.

Coro's inbound gateway can be used as a standalone service, or in conjunction with API-based protection to provide maximum threat detection and defense.

To learn more about this option, see Inbound Gateway.

How Coro works with existing email providers

This section relates to Google and Microsoft services. Interaction with other third-party email services may vary depending on your provider's configuration.

Coro's Email Security module works alongside Google and Microsoft email services.

In API-connected mode, Coro performs detection and remediation after Gmail or Microsoft 365. All pre-existing email rules within either service are processed before Coro starts scanning emails for phishing or malware, and if Gmail or Microsoft 365 quarantines an email, this takes priority over Coro.

However, for customers using the Inbound email gateway, Coro instead performs detection and remediation ahead of both providers, in that all preexisting email rules within Gmail or Microsoft 365 are processed after Coro has scanned and remediated emails for phishing and malware.

Coro's API-based protection identifies and protects only licensed user accounts in Microsoft 365 or Google Workspace. Where a distribution list, collaborative group, or shared inbox is unlicensed, or includes both licensed and unlicensed users, Coro cannot protect the unlicensed users or groups.

If you need to protect unlicensed users or groups, Coro recommends deploying the Inbound email gateway.

Accessing Email Security module settings

To configure your Email Security module, including how Coro should react when detecting potential threats in your protected user's emails:

  1. Sign in to the Coro console.

  2. From the sidebar, select Control Panel. Then, select Email Security:

    Control Panel Email Security icon

    Alternatively, from the Actionboard, select the Control Panel icon at the top of the Email Security dashboard panel:

    Email Security dashboard Control Panel link
  3. Coro displays the Email Security configuration page:

    Email Security page

Use the tabs on this page to configure real-time email security settings, trusted and untrusted sender lists, Inbound Gateway settings, and to download email client add-ins for user feedback or Coro's Secure Messages encrypted messaging service: