Interaction with Microsoft ATP
Email Security supports link rewriting even when Microsoft Safe Links is enabled.
When both Check Point Click-Time Protection and Microsoft Safe Links are active, the Check Point rewritten link is embedded within the Microsoft rewritten link.
The format of the rewritten link is as follows:
Safe Links rewritten URL prefix> < Check Point rewritten URL prefix> <Original URL> < rewritten URL suffix> <Microsoft Safe Links suffix>
This integration provides the protection of both Check Point and Microsoft without you requiring to disable either one:
-
Both Check Point and Microsoft inspects the original link upon email receipt.
-
When a user clicks the URL, both Check Point and Microsoft inspects the website or file linked and can block access if it is identified as malicious.
When clicking on re-written links, the end user experiences the following:
| Microsoft Verdict | Check Point Verdict | User Experience |
|---|---|---|
| Clean | Clean | Redirects to the original URL. |
| Malicious | Malicious or Clean | Microsoft block page. |
| Clean | Malicious | Check Point block page. See Click-Time Protection - End-User Experience. |