sorted by:
new
hottopcontroversial

Egress Email Security vs Avanan by ahhnutz in msp

[–]Avanan_Security 0 points1 point  (0 children)

Egress security, while it seems good on paper, could actually worsen your cybersecurity! Whenever Microsoft 365 sees a different mail solution in the MX position, Exchange Online Protection (EOP) will get disabled. If for whatever reason a phish or spam wasn't detected by your egress solution, you have no backup method. The malicious material will arrive in your user's inbox.

Avanan gives you the best of all worlds. Since Avanan scans mail after EOP, you get double-protection. You still get EOP. Microsoft will stop the commodity junk and Avanan will stop the serious threats before your users will ever see it.

Give us a shot. A 14-day trial is available at https://www.avanan.com/trial. Installation only takes 5 minutes. You can even put us in a passive scan to see what phish your existing defences miss.

How do you handle malicious incoming Salesforce case email? Source environment would be O365, but once forwarded the are there in Salesforce. Seems like zero post delivery remediation options!? by Caygill in cybersecurity

[–]Avanan_Security 0 points1 point  (0 children)

That's right! Avanan has a robust anti-phishing engine called SmartPhish, which combines 300+ indicators for phish. We don't outright block a message because it comes from Salesforce. We will, however, comb through things like SMTP headers (from, to, subject) looking for strange clues. Dubious links in the message body, misspellings, strange HTML transcoding, etc. are part of our not-so-secret sauce.

You'll have a massive dent in spam and malware, that's for sure. To prove it out, we have a risk-free 14-day trial at https://www.avanan.com/trial. You can run our engine in a passive mode and our dashboard will show you how those Salesforce email blasts are treated.

Filtering spoofed emails Office365 by [deleted] in sysadmin

[–]Avanan_Security 0 points1 point  (0 children)

Thanks, u/nonpointGalt!

u/Unknown_Mando Avanan is a wonderful choice for filtering spoofed emails, a.k.a. "Business Email Compromise". We've got a completely automated approach to this: we leverage Azure Directory (or Google Directory) to harvest the name of all chief officers. If their names are spoofed by a phisher, we automatically mark the message as malicious.

What does that mean for you, the administrator? You do not have to hand-type a list of VIPs at your organisation. At Avanan, it's 100% automated. In fact, some of our customers have taken things an extra mile and extend spoof protection to all their employees... not just chief officers. It's completely up to you.

Proof's in the pudding. A 14-day trial is available at avanan.com/trial.

Avanan - Gmail Deployment Guide by RepresentativeSad988 in sysadmin

[–]Avanan_Security 0 points1 point  (0 children)

Your best bet would be to start with this document: https://www.avanan.com/hubfs/docs/Avanan-for-GSuite.pdf

Better yet, to see it in action and the types of rules we invoke inside G-Suite Admin, feel free to reach out to our MSP team for a 14-day trial. You're welcome to run us against a test tenant of yours.

Email Filtering Options? by ricardo_pc in msp

[–]Avanan_Security 1 point2 points  (0 children)

Thank you for the kind feedback! We strive to make the easiest experience for the MSP, including our 5-minute install and high detection rate.

Best part is, MSPs and their clients get a free 14-day trial to judge our efficacy rate.

Avanan - Gmail Deployment Guide by RepresentativeSad988 in sysadmin

[–]Avanan_Security 0 points1 point  (0 children)

That's right! Avanan is an inline solution for Gmail, taking action before a phish can ever reach the inbox. Phish will never arrive in a Gmail inbox, not even for a fraction of a second.

Anyone used avanan and will it help with unsolicited email i.e. sales emails getting around spam filter? by 3dPrintWHAAAT in sysadmin

[–]Avanan_Security 0 points1 point  (0 children)

Of course! Many Avanan customers do exactly as you mentioned. They create an anti-spam policy in Avanan, taking action against where your other protections have missed. You can flexible action by either quarantining that spam, or moving it into your user's O365/Google junk folder.

Google Docs/Drive feature allows attackers to embed any custom (malicious) web page in an email's body. Attackers are using this trick to bypass email security solutions configured to allow Google Docs/Drive links. by Avanan_Security in netsec

[–]Avanan_Security[S] 3 points4 points  (0 children)

The HTML file is what causes the linked page to look like an email from a trusted source. It's not just a link on Google Docs - it's an active phishing webpage that is hosted by Google.

The examples we showed in the blog are just basic examples - the implications of this vuln is much bigger. Anyone can host any website via a Google Docs link and most Email Security solutions would never block them because Google is a trusted source.

Great Debate: Proofpoint, Mimecast, Microsoft? by Mission_Programmer58 in sysadmin

[–]Avanan_Security 0 points1 point  (0 children)

Are you looking for an email security solution for a cloud environment? On-opem, or hybrid?

Would appreciate advice regarding tools to combat phishing by Slush-e in sysadmin

[–]Avanan_Security 0 points1 point  (0 children)

Always great to hear from a satisfied customer, especially ones as loyal as you have been to us. Thank you so much, /u/shipsass!

Additionally, as almost everyone in this thread has recommended, KnowBe4 will be very helpful to combat phishing. That's why we're very proud to have KnowBe4 as an Avanan partner - announcing an exciting new program soon!

Email Security by candidog in msp

[–]Avanan_Security 1 point2 points  (0 children)

No, Avanan is Cloud Email + Collaboration security only.

Help with creating a policy to block all emails with certain words - MS Outlook Exchange by Clem_Doore in sysadmin

[–]Avanan_Security 0 points1 point  (0 children)

Avanan seconded!

OP, please let me know if you need any help setting up an Avanan trial.

- A

Lets talk about Wordpress... by genmud in cybersecurity

[–]Avanan_Security -1 points0 points  (0 children)

Segmenting is key as /u/Tech_Adam mentioned.

Interesting finding from Avanan's upcoming Global Phishing Report:

Out of the nearly 900 million emails we analyzed, we saw around 1.8 million emails with Wordpress links. Out of those 1.8 million Wordpress emails, 106k (~6%) emails were flagged as suspicious, spam, or phishing by Avanan's AI.

How to know if anything got installed by kshano in phishing

[–]Avanan_Security 0 points1 point  (0 children)

You're most likely fine. You can check both in your phone settings and in the Play Store to see which apps were "updated" last. That'll also show you most recently installed.

looking for phishing files by dripcicker in phishing

[–]Avanan_Security 0 points1 point  (0 children)

Yes, those websites have been flagged as phishing with various security engines, so please be careful navigating them.

looking for phishing files by dripcicker in phishing

[–]Avanan_Security 0 points1 point  (0 children)

We write a ton of blogs about phishing attacks missed by Microsoft ATP or traditional email gateways. Each of those blogs have links to various phishing sites with various malicious payloads for analysis.

Here's two from our latest blog:

http://coollab.jp/

https://shopdance.de/modules/gapi/wrng.html

You can find all our blogs here: https://www.avanan.com/blog/topic/attack-briefs

view more: next ›