Email Security Setup

Overview

Email Security monitors your email environment for threats, misconfigurations, and suspicious activity. This guide covers configuration and best practices.

Prerequisites

• Microsoft 365 or Google Workspace integration connected
• Admin access to email security settings

Step 1: Access Email Security

1. Navigate to Security Apps → Email Security
2. Review the current email security score
3. Click "Configure" to access settings

Step 2: Configure Threat Detection

1. Enable phishing detection and set sensitivity level
2. Configure malware scanning preferences
3. Set up suspicious attachment blocking rules
4. Enable external email warnings

Step 3: Set Up Forwarding Rules Monitoring

1. Enable monitoring for auto-forwarding rules
2. Set alerts for new external forwarding
3. Configure allowed forwarding domains (if any)
4. Review existing forwarding rules

Step 4: Configure Email Authentication

Bleach monitors and helps you configure:

• SPF: Verify sender IP authorisation
• DKIM: Email signature verification
• DMARC: Policy enforcement and reporting

Step 5: Review and Remediate

1. Check the Email Security dashboard for issues
2. Review users with suspicious mail rules
3. Address authentication gaps (SPF, DKIM, DMARC)
4. Monitor the security score improvements

Best Practices

• Enable DMARC with a reject policy for maximum protection
• Regularly audit mail forwarding rules
• Train users on phishing awareness
• Review quarantined messages weekly