URL Protect - Configuring URL Protect

This article provides guidelines about how the URL Protect policy works. URL Protect provides email security technology that protects users against spearphishing and targeted attacks. With a URL Protect policy, your organization can benefit from the following:

• • • Instant protection from targeted attacks and spearphishing attempts across all devices without any client-side software.
    • Protection against good websites turning bad or delayed exploits.
    • Centrally managed, rapid deployment without using any additional infrastructure to maintain.
    • Centrally visible administrative monitoring and reporting on user activity.

A limit is triggered on a rewritten URL that receives 50 clicks within 5 seconds. This serves as a DDoS protection measure to ensure system stability and security.

Optimum Settings for New Installations

We provide a list of URL Protect definitions and policy settings based on commonly used configurations that we consider to provide an optimal solution to protect you against targeted spearphishing attacks. See the Configuring Your First URL Protect Definition and Policy page for full details. You must log on to Mimecaster Central to access this page.

As one setting may not meet all your specific requirements, we recommend you review your requirements, changing these options where necessary.

Internal Email Protect Differences

If you have Targeted Threat Protection: Internal Email Protection enabled on your account, the following differences will be seen:

• • • When configuring a URL Protect definition, the "Outbound Settings" and "Journal Settings" sections are displayed. These aren't displayed if you don't have Internal Email Protection enabled.
    • The checks conducted on links in outbound and internal traffic are at the point of entry into Mimecast. Due to how these checks are conducted, the results may differ slightly from the inbound checks where Internal Email Protection isn't enabled.

Configuring URL Protect

To configure URL Protect, you must configure the following records:

• • • Configuring URL Protect Definitions
    • Configuring URL Protect Policies