Dualog email filtering

  • INTRODUCTION

The Dualog email filtering scans every message sent from shore to the vessels. The cloud-based email filtering mechanism consists of four layers of protection.

  • ANTIVIRUS LAYER

Every email attachment is sent through multiple virus scanners to determine if they contain a virus.

VIRUS DETECTED
The virus is stripped from the email, and the recipient will receive a new attachment called "Dualog-attachment-warning," which will give details on why the file was quarantined, and how to get it released in case it's a false positive.

 

  • ANTISPAM LAYER

The anti-spam analyzes the text of every email to understand the context of it. It will look for suspicious language, like the mention of drugs, mention of money or other typical attributes to a spam message. In addition it will dig into the transmission of the message to check the reputation of the sender.

SPAM DETECTED

There are two levels of spam detection in the Dualog email filter.

If the anti-spam is confident a message is spam, it will reject the message before sending it out to the ship.

If the anti-spam suspects a message is spam, but isn't confident enough, it will add a tag to the subject of the message to alert the recipient, then send the message through.

 

  • ANTIPHISHING LAYER

The anti-phishing will look for phishing attempts in the body of messages. This will typically be attempts at trying to lure the end-user to click a link that doesn't lead to where it says it will lead.

PHISHING DETECTED
If the anti-phishing filter suspects a phishing attempt it will deliver an inline warning in the message body notifying the end user of a possible phishing attempt. This enabled the end user to exercise caution before clicking links in their email.

 

  • ATTACHMENT SCANNER

The Dualog email filter performs a scan against a set list of file types that are not allowed to be sent through to ships. This includes executable files as well as other filetypes known to be used to spread malicious content. This adds another layer of security on top of the antivirus for cases where zero-day viruses are sent.

The scanner will perform a deep inspection of every sent file, meaning a simple renaming of a file extension will not enable malicious senders to send illegal file types to ships.

ILLEGAL ATTACHMENT DETECTED
The attachment is stripped from the email, and the recipient will receive a new attachment called "Dualog-attachment-warning," which will give details on why the file was quarantined, and how to get it released in case it's a false positive.

 

 

 

Export article
Was this article helpful?
1 out of 1 found this helpful
Have more questions? Submit a request

Comments

0 comments

Please sign in to leave a comment.