Email Archiving

Overview

Check Point's Archiving is a cloud-based archiving solution for preserving email communications.

Archiving provides organizations with a variety of tools for one or more of these reasons:

  • Business continuity and disaster recovery

  • Email backup and recovery of emails deleted by end-users or because of technical malfunction

  • Regulatory compliance and records management

  • Litigation and legal discovery

  • Prove chain of custody and keep the authenticity of emails

What's New in Archiving

Capability Description
Advanced Search Search archived emails by date, contact, subject, email content, keywords, attachment content, attachment type, attachment name, and domain.
Email Preview Preview archived emails directly from the Check Point Portal. Every preview action is audited.
Direct Download Select a single email and download it directly.
Legal Holds Mark emails for legal hold to preserve them for litigation, investigations, or compliance requirements.
Import Visibility Track every import in the Import page table and download a detailed status report.
Free Import Tier Import up to 1 TB of historical emails at no additional cost.

Activating Email Archiving

After your purchase request is processed, Archiving gets activated automatically.

After activation, Archiving starts archiving all the emails sent from and received by the protected users' mailboxes (users that are assigned an Email Security license). For more information on assigning licenses, Limiting License Consumption and Security Inspection to a Specific Group.

If required, administrators can import the archived emails from an external source. See Importing Emails to Archive.

Note:

Emails that were stored in Legacy Archiving are not migrated automatically. To migrate them, export the emails from Legacy Archiving and import them to Archiving, according to the size of the data. See Importing Emails to Archive.

Deactivating Email Archiving

To deactivate Archiving, contact Check Point Support.

Archived Emails

After activating Archiving, all the internal, outgoing, and incoming emails (sent or received) from protected users are archived.

For users not licensed for Email Security, the emails are not archived.

Emails that were sent before activating Archiving are not archived. To import historical emails to Archiving, see Importing Emails to Archive.

By default, the archived emails are stored for a period of 7 years and are automatically deleted afterwards. To change the retention period, see Customizing the Retention Period of Archived Emails.

Email Security encrypts and stores the archived emails in the same region as your Email Security tenant in the Check Point Portal.

To view how to set the region when creating the account, see Getting Started in the Check Point Portal Administration Guide.

To view the region in which your tenant in the Check Point Portal is created, see Account Settings in the Check Point Portal Administration Guide.

Customizing the Retention Period of Archived Emails

By default, the archived emails are stored for a period of 7 years and are automatically deleted afterwards.

  1. Go to Security Settings > Security Engines.

  2. Click Configure for Check Point Email Archiving 2.0.

    The Configure Check Point Email Archiving 2.0 pop-up appears.

  3. In the Archive emails for dropdown, select the number of years to retain the emails.

    • 1 year

    • 2 years

    • 3 years

    • 5 years

    • 7 years (default)

    • 10 years

  4. Click Save.

    Note:

    • A change in the retention period applies retroactively only when it is shortened. For example, if you change the retention period from 7 years to 1 year, Email Security deletes the emails older than one year from the archive.

    • When the retention period is extended, the new retention period applies only to new emails. For example, if you change the retention period from 1 year to 3 years, only emails archived after the change are kept for 3 years. Emails archived before the change are still deleted according to the previous 1-year retention period.

    • To retain emails for more than 10 years, contact Check Point Support.

    • Emails under a litigation hold are not deleted when the retention period expires. See Litigation Holds.