Automatic Trusted Sender and Block-List Management
Automatic Trusted Sender Management
Email Security enhances trusted sender management by automatically learning from end-user mailbox activity.
When a user moves an email from the Promotions or Junk folder to the Inbox, Email Security interprets the action as confirmation that the sender is legitimate for that specific user. The system automatically adds the sender to the user's Trusted Senders list.
-
This capability works only when the Allow end-users to trust senders of Spam emails checkbox is enabled. See Trusted Senders.
For newly added users, the automatically trust senders action is not applied immediately. It may take up to 48 hours to become effective after the user is added to the User Directory.
-
This feature is not supported if mailbox Move operations do not generate audit logs in Microsoft 365. For more information, see Managing Mailbox auditing in Microsoft 365.
-
This capability is enabled by default. To disable it, contact Check Point Support.
Automatic End User Block-List Management
Email Security enhances sender blocking capabilities by automatically learning from end-user mailbox activity.
When a user moves an email from the Inbox to the Junk folder, future emails from that sender to the same user are marked as Spam.
Similarly, when a user moves an email to the dedicated Graymail folder created by Check Point, future emails from that sender to the same user are marked as Graymail.
-
At this stage, the list of block-listed senders per user is not visible in the Check Point Portal.
-
For newly added users, the automatically block-list senders action is not applied immediately. It may take up to 48 hours to become effective after the user is added to the User Directory.
- When a user moves an email between folders (for example, from the Inbox to the Junk folder), the change can take from a few seconds to a few minutes to take effect, because it depends on Microsoft (Exchange Online) events.