Check Point - Protect Internal Rule

Rule Details


When is this rule applied?	What does this rule do?	Exceptions
Recipient is inside the organization and is a member of the inline group. See, Check Point Inline Incoming Group. Sender is inside the organization.	Routes the email using Outbound DLPCheck PointConnector. Adds X-CLOUD-SEC-AV-Info to the header with [portal],office365_emails,internal,inline value.	If the SCL is greater than or equal to 5. Sender IP address belongs to one of the relevant IP addresses for the Check Point - Protect rule. See IP Addresses for Check Point - Protect Internal Rule.

Note:

[portal] refers to the unique identifier of your Check Point Portal tenant.
Manual changes made to the rule will not be retained unless the Configure excluded IPs manually in mail flow rule option is selected under the Protect rule in the Policy section.

Portal tenants residing in the United States
- 3.101.216.128/28
- 18.97.17.224/28
- 35.174.145.124
- 44.211.178.96/28
Portal tenants residing in Europe
- 3.40.131.0/28
- 3.252.108.160/28
- 13.39.103.0/28
- 52.212.19.177
Portal tenants residing in Australia
- 3.27.51.160/28
- 13.211.69.231
- 18.98.196.176/28
- 18.143.136.64/28
Portal tenants residing in Israel
- 18.96.162.80/28
- 18.96.162.96/28
Portal tenants residing in Canada
- 3.99.253.64/28
- 3.101.216.128/28
- 15.222.110.90
- 18.99.4.64/28
Portal tenants residing in India
- 3.109.187.96
- 18.96.227.0/28
- 18.143.136.64/28
- 43.205.150.240/29
Portal tenants residing in United Kingdom
- 3.41.0.160/28
- 13.39.103.0/28
- 13.42.61.32
- 13.42.61.32/28
Portal tenants residing in United Arab Emirates (UAE)
- 3.29.194.128/28
- 3.29.194.144/28
- 18.96.97.192/28
Portal tenants residing in Singapore
- 3.44.1.224/28
- 18.99.40.64