Written By Marissa Fegan (Super Administrator)
Step 3. Configure Link Isolation
VIPRE Email Security Link Isolation is like URL sandboxing for your email. When a user clicks on a URL within an email, the email is then scanned again and Link Isolation analyzes the URL. Rescanning the link at the time the user clicks on it, even if it happens days or months after receiving the email, provides stronger protection against zero-day threats.
Your experience with Link Isolation is dependent on the options you choose here. Review all of the options below carefully to determine the best action plan for your organization before implementation.
- From your VIPRE IES admin portal, click on Settings > Link Isolation in the left-side menu
- You will see the following options available to you: URL Filter Configuration, Allowed IPs/Domains, Denied IPs/Domains, and Templates
- Select a tab below to learn more about each option
URL Filter Configuration
- On the URL Filter Configuration tab, select from the following options:
- Click-time Protection
- Enable Deeplink: This option allows Link Isolation to perform deep, cloud-based scanning to analyze malicious URLs and obtain more information; also enables URL categorization and screenshots/previews of malicious URLs
- Click-Through > Block: Blocks all potentially malicious URLs that have been clicked in the email; unable to proceed
- Click-Through > Warn and allow override: Displays a warning when potentially malicious URLs have been clicked in the email; gives the option to ignore the warning and proceed to the website
- URL Rewriting
- Rewrite displayed URLs and underlying links: Visible links shown as URLs will be rewritten; this may alter the appearance of the email as rewritten URLs can be quite long
- Rewrite URLs in text mode email: Rewrites URLs both in HTML and text mode; this may alter the appearance of the email as rewritten URLs can be quite long
- Rewrite URLs in released/replayed emails: Rewrites URLs when replaying quarantined emails
- Click-time Protection
- Click Save
Allowed IPs/Domains
- On the Allowed IPs/Domains tab, click +Add New Allowed IP/Domain
- Type the IP address or domain in the text box and include a reason why you want to allow it - when adding multiples, supported separators are commas, semicolons, and space
- Any trusted IP address or domain can be added to this list as Link Isolation does not rewrite IP addresses or Domains on this list
- VIPRE recommends only adding trusted domains, like domains associated with your organization, to the Allowed IPs/Domains list
- Click Save
To search for a previously allowed IP address or domain:
- Type the IP address or domain in the search box and press Enter
To delete a previously allowed IP address or domain:
- Locate the desired IP address or domain and click the trash icon on the right side of the screen
Denied IPs/Domains
To add an IP address or domain that you want to deny:
- On the Denied IPs/Domains tab, click +Add New Denied IP/Domain
- Type the IP address or domain in the text box and include a reason why you want to deny it - when adding multiples, supported separators are commas, semicolons, and space
- Any untrusted IP address or domain can be added to this list
- Click Save
To search for a previously denied IP address or domain:
- Type the IP address or domain in the search box and press Enter
To delete a previously denied IP address or domain:
- Locate the desired IP address or domain and click the trash icon on the right side of the screen
Templates
- This allows you to customize the message that your users see:
- When they click on the malicious URL based on whether you chose to Warn and Allow or Block Page under URL Filter Configuration
- When attempting to access an IP address or domain that has been denied
- Click Save
See End User: What to Expect above for screenshots of what these templates look like.
Enable Link Isolation
Once you've gone through the configuration options detailed in the tabs above, you're ready to enable Link Isolation.
- Scroll to the top of the screen and click the toggle next to Enable Link Isolation
Link Isolation is now configured and enabled.
Carlos Rios
Comments