What do the banners from Advanced Email Security mean?
With Advanced Email Security, all incoming email is flagged with a banner or tag informing you of its threat level. This strengthens your security by making it easier to identify and report potentially malicious content. There are different types of banners or tags that warn you of possible email threats.
Advanced Email Security from Proofpoint will display either an informational (gray) tag or a warning (yellow) tag. If the message matches both a warning and an informational tag, the warning tag is displayed. If the message matches more than one warning tag, the one that is highest in priority is applied. In order from highest to lowest priority, you might see any of the following tags:
A Potential Impersonation (DMARC) tag means an email came from a verified domain that failed a DMARC check and has been rejected.
A Newly Registered Domain tag means the email was sent from a newly-registered domain.
A High Risk Sender Location (High Risk GEO IP) tag means the email was sent from a high-risk location.
An External Sender tag means the message came from an external sender, or someone outside of your organization.
Depending on the settings that your admin enabled, you might be able to select Learn More to see why the message was tagged or to add the message to your blocklist.
Related steps
- Admins can customize email tags by adding custom text below each tag or allowing users to perform actions when they select Learn More.
- Encrypt messages with Advanced Email Security
More info
- What is Advanced Email Security?
- If these steps don't match your Advanced Email Security experience, you might be on INKY. Check out our PDF for help with Advanced Email Security powered by INKY.
