Detect and Prevent

Detect and Prevent mode provides an increased level of protection that scans email using journaling leveraging the SaaS email and storage provider APIs. Automated policy actions quarantine email messages and files that might contain such threats as malware, data leaks, and phishing attacks. User notifications and release workflows are available in this mode.

1. Incoming email or file arrives in the respective mailbox or storage folder.
2. Cloud App Security detects new that new email or file has arrived and scans it.
3. If an email message or file is classified as malicious, Cloud App Security takes action based on the policies that have been defined. Otherwise, the email or file is passed or stored unchanged to the intended recipient.
4. Optionally, the email user maybe notified of the actions taken on email messages or files sent to them.