Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Getting Started > URL analysis
URL analysis
Administrator Help | Forcepoint Email Security | Version 8.5.x
URL analysis compares a URL embedded in email with a database of categorized URLs, providing category information to allow Forcepoint Email Security to properly handle the URL. Forcepoint Email Security provides the following options for accurate and efficient spam detection:
*
Threat Intelligence Cloud Service
*
Filtering Service
*
Linking Service
Activate URL analysis by configuring and enabling a URL analysis filter on the page Main > Policy Management > Filters > Add URL Analysis Filter. See URL analysis.
Threat Intelligence Cloud Service
Threat Intelligence Cloud Service URL analysis uses the cloud-hosted Forcepoint URL Database, which is the most current repository of classified URLs. This cloud database is used by many Forcepoint solutions to identify potentially dangerous or simply unwanted URLs. This URL analysis service does not require a Forcepoint web protection solution to be installed.
Enable Threat Intelligence Cloud Service
1.
In the Security Manager, navigate to the page Settings > General > URL Analysis.
2.
From the pull-down menu URL analysis service, select Threat Intelligence Cloud Service.
3.
Verify the connection to the URL analysis service; click Test Connection.
4.
Click the refresh icon.
The URL categories list is immediately updated.
5.
Click OK.
The settings are saved.
Filtering Service
The Filtering Service requires the installation of a Forcepoint web protection solution. The Web management server maintains an updated URL database from the product download server. The email protection system queries the URL category database and determines the risk level of a URL found in an email message. The Web Security module version must be supported by the Email Security module for this function to be available.
Use the Filtering Service with a Forcepoint on-premises web security solution to access the local copy of the Forcepoint URL Database maintained by your web security product (Forcepoint Web Security or Forcepoint URL Filtering).
Filtering Service does not support the use of FIPS 140-2 Level 1 certified cryptography. Use Threat Intelligence Cloud Service or Linking Service if FIPS-certified cryptography is required.
Enable Filtering Service
1.
1. In the Security Manager, navigate to the page Settings > General > URL Analysis.
2.
From the pull-down menu URL analysis service, select Filtering Service.
3.
In the field IP address or hostname, enter the location of the database.
4.
Verify the connection to the URL analysis service; click Test Connection.
5.
Click OK.
The settings are saved.
Linking Service
The Linking Service requires the installation of a Forcepoint web protection solution. The Web management server maintains an updated URL database from the product download server. The email protection system queries the URL category database and determines the risk level of a URL found in an email message. The Web Security module version must be supported by the Email Security module for this function to be available.
Use the Linking Service with a Forcepoint Web Security on-premises solution to access both the local copy of the URL Database as well as any custom categories you have created. This service also provides dynamic category mapping updates from the URL database. Because Linking Service is an optional web protection component, you must activate it in Forcepoint Web Security to use this option.
Enable Linking Service
1.
In the Security Manager, navigate to the page Settings > General > URL Analysis.
2.
From the pull-down menu URL analysis service, select Linking Service.
3.
In the field IP address or hostname, enter the location of the database.
4.
In the field Port, enter the port number for the Linking Service.
5.
Verify the connection to the URL analysis service; click Test Connection.
6.
Click the refresh icon.
The URL categories list is immediately updated.
7.
Click OK.
The settings are saved.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Getting Started > URL analysis
Copyright 2022 Forcepoint. All rights reserved.