Email Gateway Defense is a cloud-based email security service that protects both inbound and outbound email against the latest spam, viruses, worms, phishing, and denial of service attacks. The Email Gateway Defense web interface includes the Message Log from which you can manage your quarantined messages. Additionally, you can set account preferences based on features enabled for your account by the administrator.
Permissions may include:
- Modify quarantine notification report settings. Set email receipt frequency with a list of messages in your quarantine account. Once received, you can select whether to delete or deliver these messages to your email address.
- Create exemption (accept mail from), block, or quarantine policies for email addresses, domains, and users.
- Manage quarantine inbox delivery or delete quarantined messages.
- Change password (manually added users only)
Link Accounts. Use the current account as an alias and add additional email addresses in the same domain for which quarantined email is to be forwarded to this account.
Welcome Email
After your system administrator creates your account, Email Gateway Defense sends you a welcome email including a login link. The login link expires after seven days.
Note that when using Azure or LDAP, your system administrator must first generate the welcome email, which will then be sent to you with the login link.
If your account is SSO enabled, you may see one of several different intermediary login consent screens when logging into Email Gateway Defense depending on the security consent policies set in Microsoft Entra ID by your administrator. For more information, see User Consent Flows when Accessing the Email Gateway Defense App.
Sidebar Menu Options
Use the left sidebar to view the options.
To view the Message Log, select the three vertical bars icon .
To view the Settings, select the settings icon . Under Settings, you can set quarantine notifications, add sender policies, add linked accounts, and change your password.
For help topics, select the help icon .
To log out of Email Gateway Defense, click on your profile at the bottom left corner and select Log out. Note that the profile icon may be hidden behind the cookies consent popup.
Message Log
The Email Gateway Defense web interface includes the Message Log from which you can manage your quarantined messages.
Quarantined Mail
When enabled, you are notified on a regular interval when you have quarantined messages. The quarantine notification interval is set either by your administrator or, if you have permissions, you can set the interval on the Settings > Quarantine Notification page. Note that quarantined messages are deleted after 30 days. For more information, see Quarantine Notifications.
The links in the Actions column allow the user to:
- Deliver – Click to deliver the message to regular inbox.
- Allow List – Click to deliver the message and add the sender to your allow list. All future messages from the sender are allowed and go directly to the Inbox.
- Block List – Click to have the sender added to the block list.
Figure 1. Sample Quarantined Email Notification
Clicking on the links in the quarantine notification email will redirect you to log into Email Gateway Defense. You can also manually log in into Email Gateway Defense.
Sign In with a Temporary Passcode
The administrator can enable the temporary passcode setting so that you can request a temporary passcode when you click on a link in the quarantine notification email or when logging into Email Gateway Defense. A passcode is then sent to your email address that you can use to log in. If you are using a shared mailbox or part of a distribution list, the passcode will be sent to the Shared Mailbox email address.
This is useful for users signing into a shared mailbox or distribution list, if users forgot their password, or if SSO is unavailable.
If the feature is enabled, you will see a new option when you attempt to sign into the shared email address.
Use the following instructions to authenticate with a temporary passcode:
- Click on a link or button in their quarantine digest email (Manage Quarantine, View Message Log, Deliver, Allow List, Block List) or manually log into Email Gateway Defense.
- You are prompted to sign into Email Gateway Defense.
- Enter a shared inbox or distribution list email address in the Email Address field and click Next.
- If the account is SSO enabled, you will see an intermediary page to log in with SSO or request a temporary passcode. Note that the SSO login is not for shared email addresses.
- If the account does not have SSO enabled, you will enter your password or shown the option to request a temporary passcode.
Click Email a temporary passcode to send a passcode to the shared mailbox.
- You will receive an email to the shared inbox with the temporary passcode. Copy and paste the passcode into the Temporary passcode field. Note that passcodes are case sensitive.
- Click Log in.
You are now logged into your Message Log and can manage your quarantine emails. You can also use the Deliver, Allow List, Block List buttons in the quarantine digest email as normal.
For help logging into Email Gateway Defense, contact Barracuda Networks Technical Support.
Manage Mail
Use the Message Log to manage mail. The Message Log page displays all email messages that come through Email Gateway Defense to your account. You can filter messages using the Search bar and the Date Presets, Action Taken, Action Status, and Reason drop-down menus. Note that messages are deleted after 30 days.
Figure 2. Filter Messages in the Message Log
From the Message Log page, select one or more messages, and then click on an action. To select all messages, select the check box at the top of the Message List.
Depending on the message filter, once you select one or more messages, you can take the following actions:
- Refresh – Refresh the page with the latest results.
- Deliver – The service attempts to deliver the selected messages to your mailbox; note that you cannot deliver messages blocked for Advanced Threat Protection (ATP). If a message is successfully delivered, the Delivery Status changes to Delivered. If the mail cannot be delivered, a notice displays in your browser window and the Delivery Status does not change. If delivered messages are not delivered to the recipient's mailbox, it may be due to a filter on the mail server or a service on your network catching the mail as spam. Check with your system administrator for more information. Additionally, check your local trash/spam folder for the mail.
- Export Table to CSV – Selected messages are exported to a CSV file. When prompted, enter a file name and select whether to save to your local desktop or network.
- Categorize – When one or more categorized emails are selected, allows you to change the category. For example, if the message is categorized as Corporate but you believe it should be categorized as Marketing Materials, you can change the category using the drop-down menu under the Categorize icon. This action submits this email message for recategorization to your selected category. If you select Other and enter a custom category, the category updates for that particular email message. For more information, see Email Categorization below.
Figure 3. Message Actions
Email Categorization
If the Reason for a message in your Message Log displays as Email Categorization, the email from this sender is categorized as not necessarily spam, but something that you may have subscribed to at one time but no longer want to receive. For example, newsletters and memberships, or marketing information. Email Categorization assigns some of these emails to specific categories, which the administrator can decide to allow, block, or quarantine. Supported categories display in the Message Log Reason field as:
- Email Categorization (Corporate) – Emails sent by a user at an authenticated organization from an MS Exchange Server that involves general corporate communications. Does not include marketing newsletters.
- Email Categorization (Transactional) – Emails related to order confirmations, bills, invoices, bank statements, delivery/shipping notices, and service-related surveys.
- Email Categorization (Marketing Materials and Newsletters) – Promotional emails from companies such as Constant Contact.
- Email Categorization (Mailing Lists) – Emails from mailing lists, newsgroups, and other subscription-based services such as Google and Yahoo! Groups.
- Email Categorization (Social Media) – Notifications and other emails from social media sites such as Facebook and LinkedIn.
- Email Categorization (Other) – Emails from a custom category you specify.
View Message
To view the message source, headers, and available options, click on the message; the message content displays. You can take the following actions:
- Click Source to view all headers.
- Click the Deliver icon () to
- only deliver the message; or
- deliver and add the sender to your allow list.
Note: If the administrator has disabled the ability to exempt senders, only the deliver option is shown.
- Click Report as Incorrectly Blocked for a message that should have been delivered to your regular mailbox. This includes messages that are not spam. (This option is available for quarantined and blocked messages only.)
- Click Report as Incorrectly Delivered for a message that should have been blocked. This includes spam messages.
Click Delete to remove the message from the Quarantine view. Note the message can still be accessed by changing the search filter from "Quarantine" to "All". (This option is only available when messages are filtered by the Quarantined action.)
- Click the ellipsis (3 dots), and then:
- Download Message to download the message to your local system or network.
- Add Sender Email to Block List to block the message Email.
- Add Sender Domain to Block List to block the message Domain.
Figure 4. Message Detail Options
Set Quarantine Notification Interval
Quarantined messages are deleted after 30 days.
You can direct Email Gateway Defense to notify you by email when you have quarantined messages. On the Settings > Quarantine Notification page, select Scheduled. Click and drag in the Schedule notification intervals section to set the day and time for quarantine notification email delivery. Click to clear a selection. Alternatively, select Never if you do not want to receive quarantine notifications. Click Save to save your settings. Click Reset to remove your settings and start over.
Figure 5. Set Quarantine Notification Interval
Set Exempt and Block List Policies
Use the Sender Policy page to specify whether to block, allow, or quarantine messages from a specific sender or domain. These are called exempt/block list policies. If your system administrator does not allow you to exempt or block senders/domains, existing items in the table are grayed out. To create a new policy:
- On the left sidebar, go to the Settings > Sender Policy page, and enter the email address or domain in the Sender field.
- From the Policy drop-down menu, select whether to Block, Exempt, or Quarantine the sender.
- Optionally, you can add a comment to indicate why you created the policy.
- Click Add to save the policy:
- To remove a policy, click Remove in the Actions column for the sender policy you want to remove.
Link Quarantine Accounts
Note that most users will not need to use this feature as most organizations use LDAP or Microsoft Entra ID authentication.
You can add additional email addresses in the same domain for which quarantined email is to be forwarded to this account. From the left sidebar, go to the Settings > Linked Accounts page and enter the email address in the Account field. Then click Add.
Language Localization
Use the language localization setting to change the language of the user interface. Click on your profile at the bottom left corner and select Language. Note that the profile icon may be hidden behind the cookies consent popup.
Cookie Preferences
Manage your privacy settings by enabling or disabling cookies for compliance and privacy reasons. Click Cookie Preferences at the bottom of the page to update your cookies preferences in the pop-up window.