Soteria Cloud KB
Breadcrumbs

Email Security

Email Security

Overview

Email Security in Acronis Cyber Protect Cloud provides advanced protection against phishing, malware, business email compromise (BEC), and other email-borne threats. With multi-layered detection engines, URL sandboxing, attachment analysis, and AI-powered threat intelligence, Acronis Email Security safeguards Microsoft 365, Google Workspace, and on-premises email systems from sophisticated attacks.

Key Features

  • Advanced Threat Protection - Multi-engine scanning detects malware, ransomware, and zero-day threats in email attachments

  • Anti-Phishing - AI-powered analysis identifies phishing attempts, credential harvesting, and social engineering attacks

  • URL Sandboxing - Suspicious links are detonated in isolated environments to detect malicious behavior before users click

  • Business Email Compromise (BEC) Detection - Identifies impersonation attacks, CEO fraud, and invoice manipulation attempts

  • Spam Filtering - Intelligent spam detection reduces inbox clutter and blocks unwanted messages

  • Content Filtering - Policy-based filtering blocks emails containing sensitive data, inappropriate content, or specific keywords

  • Email Archiving - Long-term retention and eDiscovery capabilities for compliance and legal requirements

  • Quarantine Management - Administrators and end-users can review, release, or delete quarantined messages

  • Reporting and Analytics - Detailed insights into email threats, user behavior, and security posture

  • Microsoft 365 & Google Workspace Integration - Seamless deployment via API integration without MX record changes

Soteria Cloud Advantage

Soteria Cloud delivers email security with local infrastructure and expertise:

  • Teraco-Hosted Email Filtering - Email security processing occurs in Teraco Johannesburg and Cape Town data centers, ensuring low latency and data sovereignty

  • POPIA-Compliant Email Archiving - Email archives remain within South African borders, meeting regulatory requirements for data residency

  • Local Threat Intelligence - Protection tuned for South African threat landscape, including region-specific phishing campaigns

  • Rapid Incident Response - Local security team available to assist with email security incidents during South African business hours

  • Integrated Protection - Email security works seamlessly with Soteria Cloud's backup and endpoint protection for comprehensive defense

How It Works

1. Deployment - For Microsoft 365/Google Workspace, API-based integration is configured through the Acronis console. For on-premises email, MX records are updated to route mail through Acronis Email Security.

2. Inbound Email Scanning - All incoming emails pass through multiple detection engines:

  • Reputation analysis checks sender IP addresses and domains

  • Anti-spam engines filter unwanted messages

  • Anti-malware engines scan attachments with signature and heuristic detection

  • URL analysis inspects links for phishing and malicious content

  • AI-powered BEC detection analyzes sender behavior and message content

3. Threat Handling - Malicious emails are quarantined; suspicious emails are tagged with warnings; clean emails are delivered normally.

4. User Notifications - End-users receive quarantine digests and can self-manage quarantined messages through a web portal.

5. Administrator Review - Security teams monitor dashboards, review alerts, and refine policies based on threat intelligence.

6. Archiving (Optional) - Emails are archived for compliance, with searchable indexes and legal hold capabilities.

Protection Against Email Threats

  • Phishing Attacks - Credential harvesting attempts, fake login pages, and impersonation emails are blocked

  • Malware Delivery - Malicious attachments (executables, macros, scripts) are quarantined before reaching users

  • Ransomware - Emails containing ransomware payloads or links to ransomware sites are stopped

  • Business Email Compromise - CEO fraud, invoice scams, and wire transfer requests from spoofed accounts are detected

  • Spam and Graymail - Unwanted marketing emails, newsletters, and bulk messages are filtered

  • Data Exfiltration - Outbound email filtering prevents sensitive data from leaving the organization

Compliance and Archiving

Email Security supports regulatory compliance requirements:

  • POPIA (South Africa) - Data residency, encryption, and audit trails for personal information in emails

  • GDPR (European Union) - Right to erasure, data portability, and breach notification capabilities

  • HIPAA (Healthcare) - Secure email handling and archiving for protected health information

  • Financial Regulations - Email retention and eDiscovery for banking and financial services compliance

Resources