You can configure the Barracuda Email Security Service to perform real-time analysis of URLs and domains so that the user is safely redirected to a valid domain or to a Barracuda domain warning of the fraud. Rewritten URLs do not expire and function indefinitely.
Table 1. Frequently Asked Questions
When Link Protection is enabled, are there URLs that are not Rewritten?
URLs are not rewritten when Link Protection is enabled if:
The URL is exempt
The URL is contained in an encrypted or protected message
Link Protection is applied to all messages. Only exempted URLs/domains in the Intent Domain policies are exempted from link protection.
How do you confirm whether a URL has been Rewritten?
To confirm whether a URL has been rewritten, hover over the URL to view the Link Protection rewrite. For example:
Hover over the URL http://www.codestore.net/
The link displays as: https://linkprotect.cudasvc.com/url?a=http://www.codestore.net&c=E,1,5bEVim247z1fGhtUhmYwbNu1H8iIZr4 NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MCgtJlXy5N3PAFAD47XFHidB4K4cNJC7Z-FhFR1P96vPVq&typo=1 indicating the URL has been rewritten.
What happens when a user clicks a Rewritten URL?
If a user clicks a rewritten URL, the following is true:
If theURL is considered bad, the user is redirected to the Barracuda Link Protection Service Access Denied warning page which displays details about the blocked URL including the link:
If the URL is considered good, the user is redirected to the website.
There is no noticeable delay when a user clicks on a rewritten URL; rewritten URLs are verified in real-time to ensure the latest status determines it to be safe.
Each time a URL is clicked its status is verified before the redirect is allowed.
If the redirection service is unavailable, that is, Barracuda cannot verify the URL's reputation, the user is redirected to the original link.
What if a domain name is misspelled?
When Link Protection is enabled and common typos are found in the URL domain name, the URL is rewritten to the correct domain name so that the user visits the intended website.
Barracuda typosquatting works with tools such as Desvio to determine misspelled domain names. To protect your misspelled domains, contact providers such as Desvio to add your misspelled domain name variations to their list.