Egress User Guide
Egress Defend
User Guide
Contents
1. Introduction
2. Defend Banners
3. Link Scanning
4. Graymail Management
5. Banner Index
6. Prevent
1 Introduction
Egress Defend is an email security tool that evaluates the context, relationships, and message content of your inbound emails. This analysis happens before the emails reach your inbox to prevent inbound cyber threats and allows your administrators to identify
and act on any future breaches.
Incoming emails from outside your organization will have colored banners to inform you of any threat that has been identified.
Please note that the information contained in this document is seen in the default configuration of Egress Defend. Your experience may vary depending on your organization’s configuration choices.
2 Defend Banners
Incoming emails from outside your organization will have a colored banner inserted to inform you how the email has been classified. The color of the banner corresponds to the associated level of threat. There are four color classifications:
All banners applied by Egress Defend can be clicked on to find out more about what was detected in the email. If you think an email has been categorized incorrectly, report it by selecting either REPORT AS PHISH or REPORT AS NOT PHISH.

3 Link Scanning
As a precaution, Egress Defend automatically rewrites any links in emails you receive. When you click on a link, you will be redirected to a landing page while checks are carried out on the linked website.
The landing page displays the link you have clicked, the true destination of the original link, and any results found in Egress Defends analysis. Based on your configuration, you may be blocked from accessing the website or you may have the option to Continue to the website if you feel it is safe to do so.

4 Graymail Management
Graymail is non-malicious bulk email that you may have previously opted-in to receive. Depending on your organization’s configuration, emails flagged as Graymail will either:
- Appear in your inbox with a Graymail banner.
- Be sent to your _Graymail folder with a Graymail banner.
- Be sent to your Junk folder with a Graymail banner.
You will be able to click on a Graymail banner which will take you to the email summary page where you will find more information about the email.

If you believe the email has been incorrectly flagged as Graymail, or you want to receive Graymail from this sender to your inbox, click the Report as not Graymail button. This will ensure future emails of this kind will not be flagged as Graymail.
5 Banner Index
All the possible Defend banners can be seen below.

6 Prevent
Egress Prevent is an outlook add-in that helps you avoid errors when sharing data by email. Using machine learning and data analysis, Egress Prevent alerts you when you are sending an email to a high-risk or wrong recipient.

If you get a popup to sign in, please do so using your email address. No password required
When Egress Prevent detects an anomaly with sending, the below will pop up:
You will also know it is active when the Prevent Active Shield is green while composing an email.