Definition

An email gateway is a type of email server that protects an organisations or users internal email servers. This server acts as a gateway through which every incoming and outgoing email passes through. A Secure Email Gateway (SEG) is a device or software used for email monitoring that are being sent and received. Email gateway protection is designed to prevent unwanted email and deliver good email. Messages that are unwanted include spam, phishing attacks, malware or fraudulent content. Outgoing messages can be analysed to prevent sensitive data from leaving the organisation or to automatically encrypt emails that contain sensitive information. SEG functionality can be deployed as a cloud service, or as an on-premises appliance, depending on requirements.

The Dangers of Open Source and Free Security

While it may seem cost-effective to use secure email gateways that are free or to use publicly available software, there are downsides. This practice will likely result in unwanted or malicious emails making their way to user inboxes.

Free security software and services are often not updated fast enough to stop new threats. Attackers and spammers change their tactics quickly, so email security gateways that cannot keep up will be ineffective. Also, using software that is easy to obtain often means that attackers who want to get malicious emails to their victims will test their emails to make sure that they are not detected.

Saving money by implementing free email security could be costly if an attack against an organisation is successful.

Cloud Vs. On-Premises

Organisations may choose to deploy a secure email gateway (SEG) on premises—using either an appliance or a virtual appliance—or in the cloud. The choice will depend on whether the company is using a cloud-based email service, such as Microsoft Office 365 or an on-premises email server, such as Exchange. It also depends on whether an organisation wants to migrate services to the cloud and its comfort level with services and data existing outside the boundary of its own network.

Organisations that deploy on-premises appliances or software to protect email are responsible for purchasing and maintaining their hardware. They are also responsible for updating the software and for connectivity to the email servers. Companies that deploy a secure email gateway as a cloud service do not have to be responsible for any of those. Instead, the security vendor has to maintain service availability.

Another benefit of utilising a cloud service to deploy a secure email gateway is scalability. If there are spikes in email traffic or an increase in the number of users, a cloud service can quickly scale to maintain performance.

Cloud vs. On-Premise Secure Email Gateway

Email Security Gateway Comparison

Many email security gateways might sound like they have the same or similar capabilities, but that is not necessarily true. Email security solutions have different functionality, so it is important to choose one that matches requirements.

Things to consider when selecting a secure email gateway are:

  • Deployment Options. Whether an organisation wants to deploy email security as a cloud service or on-premises can be a major factor in choosing the right solution.
  • Spam Effectiveness. As one of the main features of a secure email gateway, organisations should review email archiving solution comparisons of vendors using real-world email traffic.
  • Malware Effectiveness. Another core ability of an email security solution is the ability to quickly and accurately detect and block malware using active analysis or URLs and attachments.
  • Threat Intelligence. Tied to the ability to detect and block malware, threat intelligence can help administrators understand how they are being attacked, what tactics are being used and even which group is targeting them. It can also uncover which users are being attacked the most.
  • Outbound Content Control. Analysing email leaving an organisation to prevent sensitive data from leaving or automatically using encryption to enforce security policy.
  • Response Capabilities. If an email makes it to a user inbox and is subsequently found to be malicious, the ability to automatically locate and remove those emails will prevent subsequent infection.

What Is SMTP Relay?

Simple Mail Transport Protocol (SMTP) helps businesses send bulk email without getting blocklisted. Read the SMTP Relay definition and how it works.

How Proofpoint Delivers on Gartner’s Secure Email Gateway Recommendations

Organisations spend billions of dollars every year to protect themselves from today’s advanced cyber threats. What’s the best way to invest that money?

Why the Email Gateway Is Not Enough to Stop BEC Attacks

For organisations looking to protect against BEC there are five core capabilities that need to be deployed to cover the rapid shift in BEC threat tactics.

Secure Email Relay Data Sheet

Proofpoint Secure Email Relay (SER) is a hosted, multi-tenant solution. It puts you in control of applications, devices and email providers that are sending email using your organisation's domains.

Proofpoint Supervision: Compliance Monitoring Solutions

Proofpoint Supervision compliance monitoring uses deep insights and machine learning to monitor communications to meet compliance requirements and reduce risk.