Features and Benefits Parent topic

The following sections describe the TippingPoint Advanced Threat Protection for Email features and benefits.
Related information

Advanced Detection Parent topic

TippingPoint Advanced Threat Protection for Email advanced detection technology discovers targeted threats in email messages, including spear-phishing and social engineering attacks.
  • Reputation and heuristic technologies catch unknown threats and document exploits
  • Detects threats hidden in password-protected files and shortened URLs

Visibility, Analysis, and Action Parent topic

ATP Email provides real-time threat visibility and analysis in an intuitive, multi-level format. This allows security professionals to focus on the real risks, perform forensic analysis, and rapidly implement containment and remediation procedures.

Flexible Deployment Parent topic

TippingPoint Advanced Threat Protection for Email integrates into your existing anti-spam/antivirus network topology by acting as a Mail Transfer Agent in the mail traffic flow or as an out-of-band appliance monitoring your network for cyber threats.

Light-weight Policy Management Parent topic

TippingPoint Advanced Threat Protection for Email simplifies preventative actions with a streamlined policy structure.
  • Block and quarantine suspicious email messages
  • Allow certain email messages to pass through to the recipient
  • Strip suspicious attachments
  • Redirect suspicious links to blocking or warning pages
  • Tag the email subject or body with a customized string

Custom Threat Simulation Sandbox Parent topic

The Virtual Analyzer sandbox environment opens files, including password-protected archives and document files, and URLs to test for malicious behavior. Virtual Analyzer is able to find exploit code, Command & Control (C&C) and botnet connections, and other suspicious behaviors or characteristics.

Email Attachment Analysis Parent topic

TippingPoint Advanced Threat Protection for Email utilizes multiple detection engines and sandbox simulation to investigate file attachments. Supported file types include a wide range of executable, Microsoft Office, PDF, web content, and compressed files.

Embedded URL Analysis Parent topic

TippingPoint Advanced Threat Protection for Email utilizes reputation technology, direct page analysis, and sandbox simulation to investigate URLs embedded in an email message.

Social Engineering Attack Protection Parent topic

Social Engineering Attack Protection detects suspicious behavior related to social engineering attacks in email messages. When Social Engineering Attack Protection is enabled, ATP Email scans for suspicious behavior in several parts of each email transmission, including the email header, subject line, body, attachments, and the SMTP protocol information.

Password Derivation Parent topic

TippingPoint Advanced Threat Protection for Email decrypts password-protected archives and document files using a variety of heuristics and customer-supplied keywords.