It seems like your browser didn't download the required fonts. Please revise your security settings and try again.

Attention

As of March 1, 2022, the legacy Barracuda Essentials Security, Compliance, and Complete editions are no longer available for purchase. Only existing customers can renew or add users to these plans. The documentation related to these plans will no longer be available after October 30, 2022. For more information on the latest Email Protection plans, see Barracuda Email Protection.

To update your bookmarks, see the following for the latest documentation:

Note that MSP customers should continue to follow Barracuda Essentials for MSPs.

Understanding Link Protection

  • Last updated on

Link Protection is available for both paid and trial subscriptions.

Note that the Barracuda Email Security Service maintains a list of exempted domains for Link Protection.

See Anti-Fraud and Anti-Phishing Protection for more information on link protection and typosquatting.

You can configure the Barracuda Email Security Service to perform real-time analysis of URLs and domains so that the user is safely redirected to a valid domain or to a Barracuda domain warning of the fraud. Rewritten URLs do not expire and function indefinitely.

Table 1. Frequently Asked Questions
QuestionDescription
When Link Protection is enabled, are there URLs that are not rewritten?

The following are exempt from Link Protection:

  • Sender email addresses added under Inbound Settings > Sender Policies
  • URLs/domains under Intent Domain Policies set as Ignore
  • URLs/domains that are trusted by Barracuda Networks

When Link Protection is enabled, URLs are not rewritten if:

  • The URL is exempt
  • The URL is contained in an encrypted message
  • The URL is within an attachment
How do you confirm whether a URL has been rewritten?

To confirm whether a URL has been rewritten, hover over the URL to view the Link Protection rewrite. For example:

  1. Hover over the URL  http://www.codestore.net/  
  2. The link displays as:
    https://linkprotect.cudasvc.com/url?a=http://www.codestore.net&c=E,1,5bEVim247z1fGhtUhmYwbNu1H8iIZr4
    NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MCgtJlXy5N3PAFAD47XFHidB4K4cNJC7Z-FhFR1P96vPVq&typo=1
     
    indicating the URL has been rewritten.
What happens when a user clicks a rewritten URL?

If a user clicks a rewritten URL, the following is true:

  • If the URL is considered bad, the user is redirected to the Barracuda Link Protection Service Access Denied warning page which displays details about the blocked URL including the link:
    image2021-1-25 14:8:12.png

  • If the URL is considered good, the user is redirected to the website.

  • There is no noticeable delay when a user clicks on a rewritten URL; rewritten URLs are verified in real-time to ensure the latest status determines it to be safe.

  • Each time a URL is clicked its status is verified before the redirect is allowed.
  • If the redirection service is unavailable, that is, Barracuda cannot verify the URL's reputation, the user is redirected to the original link.
What if a domain name is misspelled?

When Link Protection is enabled and common typos are found in the URL domain name, the URL is rewritten to the correct domain name so that the user visits the intended website.

Last updated on