Email security gateway
securityemail-security-gateway
Inspects inbound mail for phishing, malware and spoofing before it reaches the mailbox.
- Category
- Security
- Properties
- 8
- Components
- 3
- Rules
- 0
A node of this kind resolves each property from its own props, then the component's defaults, then the default below.
| property | type | values | required | default |
|---|---|---|---|---|
| attachmentDetonation | boolean | — | no | — |
| deliveryMode | enum | inline-mx | journaling | api | no | — |
| dmarcEnforcement | boolean | — | no | — |
| linkRewriting | boolean | — | no | — |
| managed | boolean | — | no | false |
| phishingAction | enum | reject | quarantine | tag | deliver | no | — |
| quarantineRetentionDays | integer | — | no | — |
| spamAction | enum | reject | quarantine | tag | deliver | no | — |
No rule selects this kind or its category. Governance calls that a recorded gap.
vendor-neutral
# yaml-language-server: $schema=../schema/kind.schema.json # Sits in the MX or mailbox-API path and carries a delivery mode, per-disposition actions and a quarantine retention that firewall, waf and notification-service cannot express. deploymentMode and the disposition actions have no default so a rule can flag a gateway that inspects mail but never says what it does with a bad verdict. schemaVersion: "1" type: "kind" id: "email-security-gateway" category: "security" properties: deliveryMode: type: "enum" values: ["inline-mx", "journaling", "api"] phishingAction: type: "enum" values: ["reject", "quarantine", "tag", "deliver"] spamAction: type: "enum" values: ["reject", "quarantine", "tag", "deliver"] linkRewriting: type: "boolean" attachmentDetonation: type: "boolean" dmarcEnforcement: type: "boolean" quarantineRetentionDays: type: "integer" managed: type: "boolean" default: false