Each email detected by ESET LiveGuard Advanced within ESET Mail Security follows the submission process shown below. Policy settings define the following:
•hold time (only for protection of mailboxes)
•specific security levels
•action after detection (only for protection of the host server)
|
|
ESET Mail Security protects the host server and also mail boxes
ESET Mail Security with ESET LiveGuard Advanced protects the mail boxes as described below. The protection of the host machine is the same as described for ESET Server Security.
|
The email analysis follows a four-step process:
The email is downloaded from the internet or another untrusted source. Your ESET application processes and scans the email.
|
If your mail security application marks an email message for analysis, the email is held for a pre-set time period. While the email is on hold, ESET LiveGuard Advanced analyzes the email attachment. If the analysis result is clean, the email is immediately delivered. If it is malicious, a standard cleaning action takes place. If the analysis result does not come in the pre-defined waiting time, the application releases the email to the recipient. When the result is available later, within 2 minutes, all computers block this attachment immediately.
•Emails on hold are listed in ESET Mail Security. Navigate to ESET Mail Security > Tools > ESET LiveGuard Advanced to see the list of emails on hold.
•The maximum wait time for an analysis is set in the ESET Mail Security policy under Computer > Device Protections > Cloud-based protection > ESET LiveGuard > Maximum wait time for the analysis result (min).
|
ESET LiveGuard Advanced uses four separate detection layers and the analysis results are saved to a database in the ESET cloud. The database is synchronized every single minute with ESET PROTECT On-Prem. All machines with activated ESET LiveGuard Advanced and ESET application are also synchronized with the ESET cloud every 2 minutes.
|
Analysis results are also sent back to your ESET application and the email is scanned again. If the email is clean, it is delivered (unless the hold period has already passed).
Settings for cleaning actions and detection are set under category Scans in the ESET Mail Security policy.
|
