Heimdal Email Security
Filters Microsoft 365 and Google Workspace email for threats and suspicious content.
Relevant for Microsoft 365 and Google Workspace email requiring filtering, quarantine and message retention.
Filter suspicious email and retain records
Email filtering needs to distinguish unwanted and potentially harmful messages from legitimate mail, while giving administrators sufficient information to review what was detected. Sender identity, message content, attachments and links can all provide useful indicators.
Heimdal Email Security scans inbound and outbound mail, authenticates senders and inspects message content for spam, phishing, botnet activity and suspicious material. It provides quarantine reports, threat tracing and audit logs, and retains email records for up to 365 days so messages can be searched and retrieved.
Where Heimdal Email Security is used
The product is suited to filtering Microsoft 365 and Google Workspace mail, reviewing quarantined messages and tracing detected threats. Organisations that need to retain email for later search and retrieval can use its 365-day archiving capability. Where deeper analysis of attachments and fraud indicators is required, the ATP and Fraud Prevention tier adds sandboxing, deep attachment inspection and checks for suspicious links, clickbait and language.
Fits within these solutions
Suitable environments
Heimdal Email Security applies to Microsoft 365 and Google Workspace email. The Email Security 365 ICES option supports Microsoft 365 mail flow through Exchange connectors; this is an alternative connector-based approach for that environment.
Benefits
Focused Message Review
Quarantine reports and threat tracing provide records for reviewing suspicious messages.
Sender Identity Checks
SPF, DKIM and DMARC checks help identify messages with untrusted sender authentication.
Searchable Email Records
Retained messages remain available for search and retrieval for up to 365 days.
Deeper Fraud Analysis
The advanced tier examines attachments and fraud indicators beyond standard content inspection.
Capabilities
Inbound and Outbound Scanning
Scans inbound and outbound email for spam, phishing and botnet activity.
Email Content Inspection
Inspects email content, attachments, links, phrases and patterns for suspicious material.
Sender Authentication
Uses SPF, DKIM and DMARC to authenticate email senders.
Quarantine and Threat Tracing
Provides per-user quarantine reports, threat tracing and audit logs for suspicious email.
Email Archiving
Retains email for up to 365 days and supports search and retrieval.
Advanced Attachment Analysis
The ATP and Fraud Prevention tier adds sandboxing and deep attachment inspection.
Common Use Cases
Microsoft 365 Mail Filtering
Apply email scanning and sender checks to Microsoft 365 inbound and outbound mail.
Google Workspace Mail Filtering
Apply email scanning and sender checks to Google Workspace inbound and outbound mail.
Quarantine Investigation
Use per-user quarantine reports, audit logs and threat tracing to investigate suspicious email.
Email Record Retrieval
Search and retrieve archived email retained for up to 365 days.
Connector-Based Mail Flow
Use Email Security 365 ICES with Exchange connectors for Microsoft 365 mail flow.
How we help
Armstrong discusses email security requirements with customer IT teams, including the email platform in use and the need for filtering, quarantine reporting or retained message records. These discussions help Armstrong recommend whether Heimdal Email Security and its available tiers are suitable for the requirement.
