Overview
Challenges
The challenges of internal email protection
It’s a common misconception that email-borne attacks come only from the outside. While most attacks do start from the outside, attackers will typically look to land and expand once they are inside an organization. One way to gain this foothold is to use a compromised account or remote access malware to send an internal email as an internal user to spread the attack laterally to others in your organization or even outbound to external contacts.
In most cases, without their knowledge or understanding, your employees play an integral role in these attacks by sending an attacker’s emails to others in the organization.
Solutions
The Mimecast Solution
To combat internal email threats, you need to inspect internally generated emails for malicious links, attachments, or for sensitive content, and prevent the spread of attacks or data leaks.
Organizations also need continuous protection from files delivered through emails that are later determined to be malicious. Mimecast's Internal Email Protection service - Internal Email Protect enables you to monitor, detect and remediate threats that have landed internally, or that originate from your email system, whether the emails are destined to other internal users or to external recipients. Key capabilities include:
01.
Scanning of attachments and URLs for malware and malicious links, as well as content inspection enabled by Data Leak Prevention.
02.
Detection of lateral movement of attacks via email from one internal user to another.
03.
Automated remediation of infected or sensitive emails and attachments from employees’ inboxes.
04.
Manually triggered removal of emails and attachments, and when using the Mimecast Security Agent, saved attachments.
05.
Identification and blocking of threats or sensitive data attempting to leave an organization.
06.
Continuous monitoring and re-checking of the status of all previously delivered files with automated alerting and removal.
07.
Use Threat Feed, Mimecast’s Threat Intelligence and remediation API, to remove emails and attachments from mailboxes and the Mimecast Archive using your chosen SIEM, SOAR or TIP.
08.
A single administration console for easy reporting, configuration and management.
How It Works
Protecting organizations from insider email threats
Mimecast's Internal Email Protection service – Internal Email Protect provides advanced threat monitoring and remediation services for internally generated email – delivered as a 100% cloud-based security solution.
Demo
See Mimecast Internal Email Protect in action
This video highlights how employees can introduce internal threats into an organization's network and how Mimecast Internal Email Protect can help protect an organization by providing threat protection, visibility and remediation for internal and outbound emails.
More Features
Protect against email-based threats with advanced technical capabilities
Phishing, spam, business email compromise, malicious URLs, ransomware - these attacks continue to plague businesses. Explore Mimecast's features that protect against these ubiquitous threats.
Secure Email Gateway
Leveraging 50+ detection engines and numerous third-party thread feeds, Mimecast’s cloud-based Secure Email Gateway defends against sophisticated email-based attacks such as ransomware, BEC, zero day, and phishing.
LEARN MOREURL Protection
Protect against malicious URLs with every click and on every device with real-time scanning of every link, rewriting of URLs, computer vision logo scanning, browser isolation, and inline employee education.
LEARN MOREAttachment Protection
Neutralize threats from malware attachments embedded in emails with protection that balances speed of delivery with detection efficacy. Leverages multiple anti-virus engines, static file analysis, safe-file conversion, and behavioral sandboxing to provide advanced, multi-layer protection.
LEARN MOREImpersonation Protection
Get instant, comprehensive protection against malware-less email attacks that impersonate trusted senders. Real-time scanning of all inbound emails detects header anomalies, domain similarity, recency of the sending domain, and sender spoofing to keep end-users safe.
LEARN MORE
