Proofpoint Core Email Protection Features

Administration (8)

Intelligence Reporting: Actively gathers data on suspicious sources and characteristics of potentially malicious content
Email Integration Suppor: Supports secure implementation with popular email applications and clients.
Access Management: Allows administrators to set user access privileges to permit approved parties to access sensitive data.
Data Loss Prevention: Has pre-built data loss prevention (DLP) functions which prevent employees or accounts that have been hacked from sending out sensitive information.
Compliance: Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.
Intelligence Reporting: Actively gathers data on suspicious sources and characteristics of potentially malicious content
Email Clients: Supports secure implementation with popular email applications and clients.
Role-Based Rules: Allows administrators to set user access privileges to permit approved parties to access sensitive data.

Maintenance (4)

Security (6)

Anti-Malware/Anti-Spam: Prevents malware or spam in emails either through predictive or reactive anti-malware/anti-spam tools.
Encryption: Encrypts the content of emails and their attachments.
Quarantine: Isolates potentially malicious content and files before they can gain network access
Advanced Threat Protection (ATP): Includes advanced tools, including machine learning analysis to detect threats often missed by traditional filtering tools, such as unsafe attachments, advanced malware, and targetted social engineering attacks.
Anti-Phishing: Prevents both phishing attacks and spear-fishing attacks, including impersonation attacks.
Account takeover prevention: Has pre-built data loss prevention (DLP) functions which prevent employees or accounts that have been hacked from sending out sensitive information.

Detection (3)

Protection (3)

Functionality (10)

Anti-Spam: Prevents unwanted emails including bulk, mass, or other junk emails from reaching recipients mailboxes.
Anti-Malware: Prevents emails with malicious links or attachments embedded with malware, such as ransomware, spyware, and other viruses, from reaching email recipients.
Anti-Phishing: prevent social-engineering attacks such as phishing, spear-phishing, and c-level executive impersonation attacks.
Filtering Functionality: Provides filters such as: approved senders, whitelists, greylists such as bulk emails that may not be malicious, blocked senders, blacklists, IP reputation, content (such as profanity, credit card numbers, password protected files, and other sensitive information), virus detection, re-directs and malicious URLs, newsletter detection, attachment size, and invalid recipients.
Quarantine: Includes a quarantine area for users to manually inspect suspicious emails.
Outbound Email Monitoring: Monitors outgoing mail to prevent data loss by encrypting messages or preventing the messages from being sent.
Advanced Threat Intelligence/Protection: Includes advanced threat protections such as machine learning to conduct abnormal behavioral analysis, display name spoof detection especially regarding c-level impersonation attacks, detecting lookalike email domains that are visually confusing.
Archiving: Offers archival email retention for compliance purposes.
Reporting: Offers standard reporting functionality.
On-prem deployment: Supports on-premises deployments of secure email gateways, which requires a company to maintain their own hardware. This is different than Cloud Email Security software which protects cloud-based email environments and do not require on-premises hardware installations.

Encryption Techniques - Email Encryption (3)

Encryption Algorithms: Supports various encryption algorithms including AES (Advanced Encryption Standard), RSA (Rivest-Shamir-Adleman), Twofish, and Pretty Good Privacy (PGP).
Transport Encryption: Encrypts the email during transit between email servers, preventing interception by third parties.
End-to-End Encryption: Encrypts the message on the sender's device and decrypts it only on the recipient's device, ensuring that only the sender and recipient can read it.

Authentication, Verification, and Access Controls - Email Encryption (4)

Revocation Mechanisms: Allows users to revoke access to encrypted emails or keys in case of compromise.
Access Controls: Enables users to set permissions on who can access, read, or modify their encrypted emails.
Digital Signatures: Allows senders to sign their emails cryptographically, providing proof of authenticity and integrity.
Certificate Authorities: Verifies the identities of individuals or organizations through trusted third-party certificate authorities.

Security Enhancements and Auditing - Email Encryption (4)

Malware Scanning: Integrates with antivirus solutions to scan email attachments for malicious content.
Reporting: Generates reports on encryption usage, compliance status, and security incidents.
Audit Trails: Logs and tracks encryption-related activities for compliance, troubleshooting, and security analysis.
Data Loss Prevention (DLP): Offers DLP features to prevent accidental or unauthorized transmission of sensitive information.

Integration, Compatibility, and Usability - Email Encryption (4)

User-Friendly Interfaces: Offers intuitive interfaces for sending, receiving, and managing encrypted emails.
APIs and SDKs: Offers application programming interface (APIs) and software development kits (SDKs) for integrating encryption features into custom applications or workflows.
Email Client Integration: Integrates seamlessly with popular email clients, including Gmail, Microsoft Outlook, and Thunderbird.
Automation: Automatically performs encryption and decryption processes to minimize user effort and errors.