Click-Time Protection Exceptions
Harmony Email & Collaboration allows administrators to override Check Point detections or prevent link rewriting by defining exceptions to the inspection on replaced links.
Administrators can add URLs and domains to these exceptions list:
-
Allow-list - Even if Check Point finds the website malicious, Harmony Email & Collaboration allows the user to access the website. However, Harmony Email & Collaboration replaces the link, and clicking on it is logged into the system.
-
Block-list - Even if Check Point finds the website benign, Harmony Email & Collaboration blocks the user from accessing it and shows it is blocked.
-
Ignore-list - Harmony Email & Collaboration does not replace the links to these URLs/domains. Therefore, Harmony Email & Collaboration does not monitor clicks on these links or track them.
To configure Click-Time Protection exceptions:
-
Navigate to Security Settings > Exceptions > Click-Time.
-
From the drop-down in the top, select the exception type.
-
Allow-List
-
Block-List
-
-
To create an allow-list, click Create Allow-List.
-
To create a block-list, click Create Block-List
-
Under Domain, enter the required domain in the Domain pattern: domain.com format.
-
In the List Name drop-down, select the required exception type (Block-list, Allow-list, Ignore-list).
-
Click OK.
Link Shorteners and Re-Directions
Click-Time Protection exceptions apply only to the URLs written in the email and its attachments.
If an email contains a shortened link or a link that automatically redirects to one of the URLs/domains in the exception lists, the link in the email will not be excluded.However, these links will be re-written and inspected, and access to them will be enforced based on the inspection result and policy, as if they were not part of any exception list.
For example, if a domain domain.com is in the block list and the email contains the shortened link bit.ly/12345 that redirects to domain.com, the link will be re-written and inspected like any other link and users clicking on the link will not be automatically blocked from accessing the website.