Obfuscation and Validity of Rewritten URLs

Re-written URL Containing an Obfuscated Original URL

For example, if the original link is https://www.acme.org/lorem/ipsum/dolor.aspx, the re-written link:

  • Without Obfuscation - https://protect.checkpoint.com/v2/___https://www.acme.org/lorem/ipsum/dolor.aspx{}.YXAzOnByb2...{_}

  • With Obfuscation - https://protect.checkpoint.com/v2/___https://www.acme.org/NsyjwsfqrjidLjsjyn.fxuC___.YXAzOnByb2...

Note:

The obfuscation may increase the length of the rewritten link by approximately 2-3 characters compared to the link without obfuscation.

Validity of Rewritten URL

  • Email Security inspects the website behind the rewritten URL only when you have a valid license.

  • Rewritten URLs remain valid indefinitely, even when you do not have a valid license or when you delete the Check Point Portal portal.

  • After the license expires, Email Security redirects the rewritten URL to the original URL without inspection.

  • Email Security handles the rewritten URLs as described above regardless of the identity of the user that clicks the URL - internal user, external user, or unidentified user.

    Therefore, even if the email is forwarded to a user in your organization that is not protected by Check Point, this user's click is also secured by Check Point.