End-User Portal (Email Security Portal)

Harmony Email & Collaboration offers an Email Security Portal for end users to access all quarantined emails. In this portal, end users can preview the quarantined emails, restore them, or submit a restore request for them - all in accordance with the defined organization's policies.

Notes:

  • The Email Security Portal only shows the quarantined emails that users can act on - either restore directly or request to restore.

  • The email's availability in the Email Security Portal depends on its metadata retention period.

  • The availability of action buttons (Restore / Request Restore) and email body depends on the raw email's retention period. For more information, see Appendix G: Data Retention Policy.

  • For Microsoft quarantined emails:

    • Taking action might fail if the email is no longer retained in Microsoft's quarantine.

    • Once restored, the email body will not be visible.

To enable the Email Security Portal for End Users:

  1. Go to Security Settings > User Interaction > Quarantine.

  2. In the End User Portal section, select the Enable Email Security Portal for End Users toggle button.

  3. To allow end users to view images in the quarantined emails in the End User Portal, select the Allow users to display images checkbox.

    End users can now see the Display Images button when they preview quarantined emails in the End User Portal.

  4. Click Save and Apply.

After enabling the Email Security Portal, all the end users can access it from this link: https://email-security-portal.checkpoint.com.

To limit access to specific users, see Limiting End User Portal Access to Specific Users.

Accessing the Email Security Portal

Administrators can enable end users to log in to the Email Security Portal using these authentication methods:

  • Microsoft login

  • Google login

  • One-time password login

In addition, administrators can allow end users to access the Email Security Portal to manage quarantined emails and submit restore requests directly from their Outlook inbox using the Outlook Add-in, without re-authentication. See Accessing the Email Security Portal from Outlook.

To enable or disable an authentication method, do these:

  1. Access the Harmony Email & Collaboration Administrator Portal and click Security Settings.

  2. Go to User Interactions > Quarantine > End User Portal.

  3. In the Authentication section, select or deselect the required authentication methods:

    • Microsoft login

    • Google login

    • One-time password via email

  4. Click Save and Apply.

    Note - After enabling the authorizing method (google/microsoft), an administrator must authorize the login for the entire organization by granting the necessary permission. For more information, see Authorizing Login Access for the Organization.

Authorizing Login Access for the Organization

Harmony Email & Collaboration allows users to log in to the End User Portal (Email Security Portal) with Microsoft/Google credentials. To enable this option, the administrator must authorize the login for the entire organization by granting the necessary permissions.

To authorize Microsoft/Google login permissions:

  1. Access the Email Security Portal using https://email-security-portal.checkpoint.com.

  2. To allow end users to sign in using Microsoft credentials, select Sign in with Microsoft.

  3. To allow end users to sign in using Google credentials, select Sign in with Google.

  4. Enter the admin credentials.

    The Permissions requested pop-up appears for End User Portal HEC - prod application and requests for the necessary permissions. See Required Permissions for Microsoft/Google Login Authorization.

  5. To allow end users to sign in using Microsoft/Google credentials, select the Consent on behalf of your organization checkbox.

  6. Click Accept.

    End users can now sign in to the Email Security Portal using the organization's Microsoft/Google credentials.

Accessing the Email Security Portal from Outlook

If an administrator enables the Email security portal checkbox in the Outlook Add-In Configuration, the system adds an Email Security Portal button to Outlook, which provides:

  • Secure access to the Email Security Portal without re-authentication.

  • Real-time badge indicators for:

    • Newly quarantined emails since the last visit.

    • Updates on restore requests.

    Note - This capability uses the same Outlook Add-In deployment and does not require a separate installation.

To view the supported devices for the Outlook Add-In, see Outlook Add-In - Supported Outlook Types and Platform.

Accessing the Email Security Portal from Outlook - End-User Experience

00:03: This tutorial guides you through how to access the Email Security Portal from Outlook

00:08: Open the Outlook application and locate the checkpoint email security portal in the add-ins.

00:14: if an administrator has enabled, the email security portal option in the Outlook, add-in the Outlook application, displays the add-in name, as configured, by th administrator, allowing secure access without reauthentication,

00:27: Click, email security, portal to proceed.

00:30: The email security portal opens in a left side panel within Outlook.

00:34: From here, you can review and manage portal features.

00:38: To expand your view, click pop out.

00:40: The portal will open in a new window for easier, navigation and full screen access.

If an administrator has enabled the email security portal option in the Outlook Add-In, the Outlook application displays the add-in name (as configured by the administrator), allowing secure access without re-authentication.

To access the Email Security Portal from Outlook:

  1. Access the Outlook application.

  2. Go to the Add-Ins section.

  3. Click the Email Security Portal option to access the portal without re-authentication.

Required Permissions for Microsoft/Google Login Authorization

Permissions required from Microsoft/Google

Functions performed by Harmony Email & Collaboration
Sign you in and read your profile Allows users to sign in to the app and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.
Maintain access to data you have given it access to Allows the app to view and update the signed-in user data even when you are not currently using the app.

Limiting End User Portal Access to Specific Users

By default, Harmony Email & Collaboration provides all users with access to the End User Portal.

To limit access to specific users or groups:

  1. Access the Harmony Email & Collaboration Administrator Portal.

  2. Go to Security Settings > User Interactions > Quarantine.

  3. In the Allowed Users section, select the users you want to allow access to the End User Portal.

    • To allow access to all users in your organization, select All Users.

    • To allow access to specific users or groups, select Select Users.

      1. In the Specific Users and Groups section, select the required users or groups.

      2. Click Add to Selected.

  4. Scroll-down and click Save and Apply.
Note - If Microsoft or Google login is configured in the authentication methods (see Authentication Methods for Accessing the Email Security Portal), administrators can also restrict end users access through Microsoft or Google.

Including Blocklisted Emails in the End User Portal

Administrators can control the visibility of blocklisted emails in the End User Portal.

To include blocklisted emails in the End User Portal:

  1. Access the Harmony Email & Collaboration Administrator Portal.

  2. Go to Security Settings > User Interactions > Quarantine > End User Permissions.

  3. In the Block Listed Emails section, select the Include block-listed emails checkbox.

  4. Scroll-down and click Save and Apply.

Note - Emails quarantined due to a blocklist appear in the End User Portal, where users can take action on them like non-blocklisted emails.