---
title: "Email Security"
canonical: "https://support.soteria-cloud.co.za/space/SCKB/50069506/Email%20Security"
format: markdown
---
# Email Security

## Overview

Email Security in Acronis Cyber Protect Cloud provides advanced protection against phishing, malware, business email compromise (BEC), and other email-borne threats. With multi-layered detection engines, URL sandboxing, attachment analysis, and AI-powered threat intelligence, Acronis Email Security safeguards Microsoft 365, Google Workspace, and on-premises email systems from sophisticated attacks.

## Key Features

- **Advanced Threat Protection** - Multi-engine scanning detects malware, ransomware, and zero-day threats in email attachments
- **Anti-Phishing** - AI-powered analysis identifies phishing attempts, credential harvesting, and social engineering attacks
- **URL Sandboxing** - Suspicious links are detonated in isolated environments to detect malicious behavior before users click
- **Business Email Compromise (BEC) Detection** - Identifies impersonation attacks, CEO fraud, and invoice manipulation attempts
- **Spam Filtering** - Intelligent spam detection reduces inbox clutter and blocks unwanted messages
- **Content Filtering** - Policy-based filtering blocks emails containing sensitive data, inappropriate content, or specific keywords
- **Email Archiving** - Long-term retention and eDiscovery capabilities for compliance and legal requirements
- **Quarantine Management** - Administrators and end-users can review, release, or delete quarantined messages
- **Reporting and Analytics** - Detailed insights into email threats, user behavior, and security posture
- **Microsoft 365 & Google Workspace Integration** - Seamless deployment via API integration without MX record changes

## Soteria Cloud Advantage

Soteria Cloud delivers email security with local infrastructure and expertise:

- **Teraco-Hosted Email Filtering** - Email security processing occurs in Teraco Johannesburg and Cape Town data centers, ensuring low latency and data sovereignty
- **POPIA-Compliant Email Archiving** - Email archives remain within South African borders, meeting regulatory requirements for data residency
- **Local Threat Intelligence** - Protection tuned for South African threat landscape, including region-specific phishing campaigns
- **Rapid Incident Response** - Local security team available to assist with email security incidents during South African business hours
- **Integrated Protection** - Email security works seamlessly with Soteria Cloud's backup and endpoint protection for comprehensive defense

## How It Works

**1. Deployment** - For Microsoft 365/Google Workspace, API-based integration is configured through the Acronis console. For on-premises email, MX records are updated to route mail through Acronis Email Security.

**2. Inbound Email Scanning** - All incoming emails pass through multiple detection engines:

- Reputation analysis checks sender IP addresses and domains
- Anti-spam engines filter unwanted messages
- Anti-malware engines scan attachments with signature and heuristic detection
- URL analysis inspects links for phishing and malicious content
- AI-powered BEC detection analyzes sender behavior and message content

**3. Threat Handling** - Malicious emails are quarantined; suspicious emails are tagged with warnings; clean emails are delivered normally.

**4. User Notifications** - End-users receive quarantine digests and can self-manage quarantined messages through a web portal.

**5. Administrator Review** - Security teams monitor dashboards, review alerts, and refine policies based on threat intelligence.

**6. Archiving (Optional)** - Emails are archived for compliance, with searchable indexes and legal hold capabilities.

## Protection Against Email Threats

- **Phishing Attacks** - Credential harvesting attempts, fake login pages, and impersonation emails are blocked
- **Malware Delivery** - Malicious attachments (executables, macros, scripts) are quarantined before reaching users
- **Ransomware** - Emails containing ransomware payloads or links to ransomware sites are stopped
- **Business Email Compromise** - CEO fraud, invoice scams, and wire transfer requests from spoofed accounts are detected
- **Spam and Graymail** - Unwanted marketing emails, newsletters, and bulk messages are filtered
- **Data Exfiltration** - Outbound email filtering prevents sensitive data from leaving the organization

## Compliance and Archiving

Email Security supports regulatory compliance requirements:

- **POPIA (South Africa)** - Data residency, encryption, and audit trails for personal information in emails
- **GDPR (European Union)** - Right to erasure, data portability, and breach notification capabilities
- **HIPAA (Healthcare)** - Secure email handling and archiving for protected health information
- **Financial Regulations** - Email retention and eDiscovery for banking and financial services compliance

## Resources

- [Acronis Email Security Overview](https://www.acronis.com/en-us/products/cloud/cyber-protect/email-security/)
- [Acronis Email Security Documentation](https://www.acronis.com/en-us/support/documentation/CyberProtectionService/#email-security.html)
- [Soteria Cloud - Email Security for South African Businesses](https://web.soteriacloud.com)