Interaction with Microsoft ATP

Email Security supports link rewriting even when Microsoft Safe Links is enabled.

When both Check Point Click-Time Protection and Microsoft Safe Links are active, the Check Point rewritten link is embedded within the Microsoft rewritten link.

The format of the rewritten link is as follows:

Safe Links rewritten URL prefix> < Check Point rewritten URL prefix> <Original URL> < rewritten URL suffix> <Microsoft Safe Links suffix>

This integration provides the protection of both Check Point and Microsoft without you requiring to disable either one:

  • Both Check Point and Microsoft inspects the original link upon email receipt.

  • When a user clicks the URL, both Check Point and Microsoft inspects the website or file linked and can block access if it is identified as malicious.

When clicking on re-written links, the end user experiences the following:

Microsoft Verdict Check Point Verdict User Experience
Clean Clean Redirects to the original URL.
Malicious Malicious or Clean Microsoft block page.
Clean Malicious Check Point block page. See Click-Time Protection - End-User Experience.