Email Gateway Security supports adding extra headers to emails, to provide a user-defined notation for emails based on different processing properties of a specific email.

Per rule additional headers

Additional headers can be configured separately for each security rule.

Actions and statuses with additional headers

Additional headers can be assigned to emails in case of the following actions or statuses, for each rule:

Action or status	Location	Description
Allowed emails	SCAN / Allowed actions	These headers will be applied to emails that are allowed (i.e. have no threat detected, have no DLP violation, have no spam and phishing).
Blocked emails	ADVANCED THREAT PREVENTION / Blocked actions	These tags will be applied to emails that are blocked due to threat detected or DLP violation.
Sanitized emails	ZERO-DAY MALWARE PREVENTION	These headers will be applied to emails with disarmed and reconstructed contents (headers, body or attachments).
Known phishing emails	ANTI-PHISHING	These headers will be applied to emails that are known phishing (for details see 5.7. Phishing and spam).
Potential phishing emails	ANTI-PHISHING	These headers will be applied to emails that are potential phishing (for details see 5.7. Phishing and spam).
Known spam emails	ANTI-SPAM	These headers will be applied to emails that are known spam (for details see 5.7. Phishing and spam).
Potential spam emails	ANTI-SPAM	These headers will be applied to emails that are potential spam (for details see 5.7. Phishing and spam).
Bypassed emails	ADVANCED	These headers will be applied to emails that were bypassed by any reasons (for details see 5.5. Bypassing).

For details see 4.4. Policy.

4.4.2. Additional email headers

Actions and statuses with additional headers

Search results