What do the banners from Advanced Email Security mean?
With Advanced Email Security, all incoming email is flagged with a banner or tag informing you of its threat level. This strengthens your security by making it easier to identify and report potentially malicious content. There are different types of banners or tags that warn you of possible email threats.
- If you’re using Advanced Email Security from Proofpoint, you’ll see a white header with “GoDaddy."
- If you’re using Advanced Email Security powered by INKY, you’ll see a blue header that includes "Powered by INKY."
Advanced Email Security from Proofpoint will display either an informational (gray) tag or a warning (yellow) tag. If the message matches both a warning and an informational tag, the warning tag is displayed. If the message matches more than one warning tag, the one that is highest in priority is applied. In order from highest to lowest priority, you might see any of the following tags:
A Potential Impersonation (DMARC) tag means an email came from a verified domain that failed a DMARC check and has been rejected.
A Newly Registered Domain tag means the email was sent from a newly-registered domain.
A High Risk Sender Location (High Risk GEO IP) tag means the email was sent from a high-risk location.
An External Sender tag means the message came from an external sender, or someone outside of your organization.
Depending on the settings that your admin enabled, you might be able to select Learn More to see why the message was tagged or to add the message to your blocklist.
Related steps
- Admins can customize email tags by adding custom text below each tag or allowing users to perform actions when they select Learn More.
- Encrypt messages with Advanced Email Security
Neutral (gray), caution (yellow), and danger (red) are all possible threat categories.
A neutral (External) banner means that the message came from an external sender but does not appear to be a threat.
A Caution banner means that Advanced Email Security found something unusual in the email. It might not be considered dangerous, like when you receive email from a first-time sender, but the message should be treated with caution.
A Danger banner means that Advanced Email Security believes the message is suspicious and could be a phishing attempt. Possible reasons for this banner include brand impersonations, blacklisted phishing URLs, or attempts to spoof mail so it looks like it came from an internal company account. Your security team or email administrator can configure your server to automatically quarantine these dangerous emails.
If the email includes a suspicious link that you or another user opened, Advanced Email Security will stop you from continuing to the malicious site.
Related steps
- If the banner isn't showing the right threat level, report it to help improve Advanced Email Security.
- Admins can customize email banners to change what details are shown or suppress certain types.
- Encrypt messages with Advanced Email Security
