USG210 able to block phishing email?

Amara

We have USG210.
Does USG210 able to block/filter phishing email?
Does USG210 able to block/filter phishing websites?

Zyxel_Cooldia

Hi @Arama,
The configuration as below,
1) Create a content filter profile
        Go to “Configuration > UTM profile > Content filter”
        -Click “Add”
        -Tick “Enable Content Filter Category Service”
        -Tick “Phishing & Fraud” on security threat.
        -Click “OK” to save content filter profile.
       
2) Create a Anti-Spam profile
        -Go to “Configuration > UTM profile > Anti-spam”
        -Go to Mail Scan tab
        -Tick “Enable Sender Reputation Checking (SMTP only)”,
          “Enable Mail Content Analysis”, “Enable Virus Outbreak Detection”
       
        -Create a Anti-spam profile
        -Click ”Add”
        -Tick all Scan option
        -Click “Ok” to save Anti-Spam profile.
       
2) Apply Anti-spam and content filter profile on security policy
   -Go to “Configuration > Security Policy > Policy control ”
   -Enable content filter and anti-spam and select profile you created.
       

Zyxel_Cooldia

Hi @Amara,
Yes, both CF and phishing can filter phishing. It is phishing & fraud category.

Amara

How do I set this up on USG210?

Zyxel_Cooldia

Hi @Arama,
The configuration as below,
1) Create a content filter profile
        Go to “Configuration > UTM profile > Content filter”
        -Click “Add”
        -Tick “Enable Content Filter Category Service”
        -Tick “Phishing & Fraud” on security threat.
        -Click “OK” to save content filter profile.
       
2) Create a Anti-Spam profile
        -Go to “Configuration > UTM profile > Anti-spam”
        -Go to Mail Scan tab
        -Tick “Enable Sender Reputation Checking (SMTP only)”,
          “Enable Mail Content Analysis”, “Enable Virus Outbreak Detection”
       
        -Create a Anti-spam profile
        -Click ”Add”
        -Tick all Scan option
        -Click “Ok” to save Anti-Spam profile.
       
2) Apply Anti-spam and content filter profile on security policy
   -Go to “Configuration > Security Policy > Policy control ”
   -Enable content filter and anti-spam and select profile you created.
       

ChrisGer

Hi @Zyxel_Cooldia
i remember the MailScan and the mail-attachments are only possible, if the communication is unsecure (Port 25/110) between the enduser and the mailserver ?
ist there a update 4.31 ?

Regards
Christian

Zyxel_Cooldia

Hi @ChristianG,
Same as before, it is unable to work on encrypted connection, even with SSL inspection.