What is URL defense?

Overview

This articles provides an overview of Proofpoint URL Defense.

At any time you can report an email to ITS Security for analysis using the guide at https://support.uidaho.edu/TDClient/KB/ArticleDet?ID=70.


What is Proofpoint URL Defense?

Proofpoint URL Defense protects against malicious email links. When an email is received, URL Defense rewrites all links in the message to redirect to the Proofpoint email filter. If you click a rewritten link, your browser is sent to Proofpoint first which only allows your browser to visit the original website if it is not categorized as malicious. A malicious website can still go undetected and a rewritten link could lead to a malicious website. Please exercise caution when clicking links in email, especially from unknown sources.

Re-written links start with https://urldefense.com/.  The visible link text is not changed, however, if you hover your mouse over the link you can see the re-written link, as shown below in Outlook:

Example of URL Defense in action

In Outlook Web App (OWA):

Hovering over a link in Outlook Web App

 

How do I know a link was blocked?

If a link is blocked by Proofpoint, you will see the following page in your web browser. This indicates the link was categorized as malicious by Proofpoint's automated security system or the ITS Security team.

Proofpoint blocked site

 

A link was blocked that I need to access. How do I request access?

If a link is blocked, you can request the link be reviewed and the block removed if the website is not malicious. To request review, please contact your local support team, send an email to support@uidaho.edu, or submit a ticket through the following button:

Request Site Review

Details

Article ID: 1326
Created
Mon 6/24/19 1:48 PM
Modified
Mon 7/15/19 4:23 PM