Symantec Email Safeguard Cloud, Initial Cloud Service Subscription with Support, 1-24 Users 1 YR

Symantec.cloud services secure and manage information stored on endpoints and exchanged through email, Web, and IM interactions.
It blocks new and sophisticated email threats such as ransomware, spear phishing, and business email compromise with a multilayered defense and insights from the world’s largest civilian global intelligence network. And it does all this with the industry’s highest effectiveness and accuracy. Figure 1 Email Security.cloud repels spear phishing attacks with comprehensive defense that includes protection, isolation, visibility, and user awareness. It also accelerates your attack response with analytics that provide the deepest visibility into targeted attack campaigns. In addition, Symantec keeps your email secure and confidential with built-in, granular DLP and encryption controls, as well as tight integration with Symantec Data Loss Prevention. Finally, Email Security.cloud is part of the Symantec Integrated Cyber Defense Platform, which covers endpoint and web security, threat analytics, security orchestration and automation, and more.


Email Security.cloud supercharges the built-in security of cloud and on-premises
email systems by preventing the most malware and email threats with the fewest
false positives. This cloud-based solution repels sophisticated email attacks such
as ransomware, spear phishing, and business email compromise with multiple,
advanced detection technologies and telemetry from the Symantec Global
Intelligence Network. It also improves user productivity by blocking spam and other unwanted email such as newsletters and marketing emails. Email Security.cloud is backed by the industry’s strongest service-level agreements: 100 percent virus protection, more than 99 percent spam filtering, and 100 percent email uptime.

Emerging threat prevention

Sandboxing uncovers targeted and advanced attacks by executing unknown files in physical and virtual environments. This helps catch
‘virtual machine-aware’ attacks, which are threats that don’t exhibit suspicious behavior in virtual environments. The Symantec sandbox
mimics human behavior to draw out attacks that appear malicious only in the presence of humans. In addition, our sandbox uses machine
learning to detect stealthy, persistent threats by analyzing code for suspicious characteristics. And it utilizes network traffic analysis to
identify malware that call command-and-control servers.

Behavior analysis blocks new, crafted, and hidden ransomware by examining all email characteristics including delivery behavior,
message attributes, attachments, and social engineering tricks. It also blocks new ransomware variants by determining if an email
contains reused malicious code. Finally, it uses file decomposition techniques to spot and extract hidden ransomware within attachments.


Phishing defense

Link protection probes and evaluates links in real time before email delivery and again at the time of click—unlike traditional email
security solutions that rely on reactive blacklists or signatures to block only known spear phishing links. Link protection follows links to
their final destination, even when attackers try to bypass detection with sophisticated techniques. Moreover, because cyber criminals
often reuse code in new attacks, we use advanced phishing variant detection to sniff out and block spear phishing links that are similar to
known phishing attacks.

Impersonation controls provide the strongest protection against BEC and other spoofing attacks by using a sophisticated
impersonation engine to block threats that masquerade as a specific user or legitimate email domain in your organization.


Malware and spam protection

Malware and spam defense stops spam and malware by inspecting links and attachments with technologies such as reputation
analysis, antivirus engines, and antispam signatures.

Connection-level protection reduces the risk of spam and malware by slowing and dropping anomalous SMTP connections.