{"id":6430,"date":"2026-10-12T13:04:09","date_gmt":"2026-10-12T11:04:09","guid":{"rendered":"https:\/\/eu.klytic.com\/email-security-gateway\/"},"modified":"2026-10-12T13:34:33","modified_gmt":"2026-10-12T11:34:33","slug":"email-security-gateway","status":"publish","type":"page","link":"https:\/\/eu.klytic.com\/en\/email-security-gateway\/","title":{"rendered":"Built-in filter or security gateway in front of your email"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"6430\" class=\"elementor elementor-6430 elementor-6300\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-86190a3 e-con-full kly-g e-flex e-con e-parent\" data-id=\"86190a3\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-c68b276 e-con-full kly-g-hero e-flex e-con e-parent\" data-id=\"c68b276\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-e37604b e-con-full kly-g-hero-in e-flex e-con e-parent\" data-id=\"e37604b\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-886076c elementor-widget elementor-widget-text-editor\" data-id=\"886076c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-crumb\"><a href=\"\/en\/\">Home<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/\">Guides<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/email-security\/\">Email security<\/a><\/p><p class=\"kly-g-pill\" style=\"--pill:#f87171\">Email security \u00b7 Understand<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-299189e elementor-widget elementor-widget-heading\" data-id=\"299189e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Built-in filter or security gateway in front of your email<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e32925d elementor-widget elementor-widget-text-editor\" data-id=\"e32925d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-lead\">The filter included in an email system protects that particular email system. A security gateway sits in front of it: the domain\u2019s MX record points to it, it receives the mail, analyzes it, then delivers it to the mailbox server, whatever that server is. The real difference lies in when the analysis happens: before the message enters the mailbox, or after.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-81fd32d elementor-widget elementor-widget-text-editor\" data-id=\"81fd32d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-meta\"><span>Updated <b>October 2026<\/b><\/span><span><b>7 min<\/b><\/span><span>Official sources cited<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c3029fc e-con-full kly-g-body e-flex e-con e-parent\" data-id=\"c3029fc\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-228d65f e-con-full kly-g-article e-flex e-con e-parent\" data-id=\"228d65f\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4dd2d99 elementor-widget elementor-widget-text-editor\" data-id=\"4dd2d99\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Two possible places for the filter<\/h2><p>Every business email system already filters mail. Microsoft 365, Google Workspace, an Exchange server or a hosted server all have built-in anti-spam and antivirus. That filter is designed for the platform that carries it: its rules, reports and logs live in that platform, and leave with it the day you change providers.<\/p><div class='kly-def'><p><strong>SMTP gateway.<\/strong> A mail server placed upstream of the mailbox. RFC 5321, which describes how mail is transported over the Internet, calls a server that receives a message and passes it on a \u201cmail transfer agent\u201d (MTA). The domain\u2019s MX record points to the gateway: it is therefore the gateway that sending servers contact first.<\/p><\/div><p>After analysis, the gateway hands the message to the mailbox server. Users do not see it. They keep their email client, webmail and phone.<\/p><p>The practical consequence: the gateway does not depend on the mailbox. You can change mail servers without changing filters, or strengthen the filter without changing servers. They are two separate purchases, decided separately.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cfe9982 elementor-widget elementor-widget-text-editor\" data-id=\"cfe9982\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Before or after delivery<\/h2><p>A filter can act at two points in time, and the choice is not neutral.<\/p><ul><li><strong>Before delivery.<\/strong> The message is analyzed while in transit. If it is deemed dangerous, it does not enter the mailbox. A malicious attachment can be removed and replaced with an informational notice. A suspicious message goes to quarantine instead of being delivered.<\/li><li><strong>After delivery.<\/strong> The message is already in the mailbox when the analysis concludes, or when new information arrives, for example a link reported a few hours later. The tool must then go and remove it. In the meantime, the user may have opened it, clicked or forwarded the attachment.<\/li><\/ul><p>The two approaches are often combined: upstream analysis, then protection that continues at the time of click, because a site that was clean on receipt can be compromised later. Neither claims to stop everything.<\/p><p>Klytic places the analysis before the mailbox for a simple reason: what is not delivered does not need to be clawed back. That does not remove the need for a human reflex when a credible message passes every check, as in <a href='\/en\/ceo-fraud-impersonation\/'>CEO fraud<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ecd80cb elementor-widget elementor-widget-text-editor\" data-id=\"ecd80cb\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Why place a security MTA in front of the server<\/h2><ul><li><strong>A tool built for the job.<\/strong> The gateway manages neither calendars nor storage. Its rules cover the sender, the content and the attachments, and are configured domain by domain.<\/li><li><strong>Protection that stays in place.<\/strong> It survives a change of mailbox server, and can cover several servers at once: a subsidiary, a legacy email system, a new platform.<\/li><li><strong>A decision you can read in one place.<\/strong> Each message carries the reason for the decision, whichever server receives it next.<\/li><li><strong>A second opinion.<\/strong> The email system\u2019s built-in filter keeps working behind the gateway.<\/li><\/ul><p>What it costs: one more intermediary on the path. It must be declared to the mailbox server, otherwise that server sees all mail arriving from a single address and misjudges the real sender. SPF, DKIM and DMARC also need to be reviewed. The page <a href='\/en\/protect-existing-email\/'>Protect the email system you already have<\/a> describes these settings.<\/p><h3>Everyone is concerned<\/h3><p>For ANSSI, the French national cybersecurity agency, email is \u201cthe main vector for infecting workstations\u201d, and email systems are \u201cone of the main attack vectors since they are very widely used and exposed on the Internet\u201d (translation). Phishing, malicious attachments, fake transfer orders: an email address is all it takes to be targeted, and a very small business is as exposed as a large group.<\/p><p>ANSSI makes email protection one of its ten golden rules of digital security, and its catalog of measures recommends implementing an anti-spam and anti-phishing solution. Its guide on connecting an information system to the Internet points out that business use of email is very widespread \u201cwhatever the size and sector of activity of the entity\u201d, and that anti-spam and malicious-content detection mechanisms \u201cmust be implemented\u201d (translation).<\/p><p>Security filtering of mail is therefore no longer optional. The real question is where it sits, and what it can stop before the message reaches the mailbox.<\/p><p class='kly-fit yes'>The gateway adds to your email system\u2019s filter an analysis that does not depend on your mailbox vendor, a single policy for several servers or several companies, and decisions that can be explained.<\/p><p class='kly-fit no'>No filter, whether built in or placed in front, replaces the reflexes ANSSI recommends: do not click on a suspicious link or attachment, do not reply to a suspicious email, verify through another channel, enable two-factor authentication.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bcbd8cc elementor-widget elementor-widget-text-editor\" data-id=\"bcbd8cc\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>What the gateway sees, and what it keeps<\/h2><p>To decide, a gateway reads the entire message: the stated sender and the sending server, the authentication results (SPF, DKIM, DMARC), the text, the links, the attachments. From these it reaches a decision: deliver, quarantine, reject, or defer an unknown sender.<\/p><p>Reading is not keeping. The right question to ask a provider is: what remains, and for how long? For Klytic MTA, the answer distinguishes three cases, plus the record of the decision.<\/p><div class='kly-table'><table><thead><tr><th>Situation<\/th><th>What is kept<\/th><th>Duration<\/th><\/tr><\/thead><tbody><tr><td>Normal delivery<\/td><td>Personal analysis data (sender, recipients, subject, body, attachment names) is purged. What remains is the timestamp, the sending domain, the scores and the decision.<\/td><td>Purged after 2 days by default, configurable<\/td><\/tr><tr><td>Dangerous message in quarantine<\/td><td>The full message, encrypted<\/td><td>The validity period of the release link, 7 days<\/td><\/tr><tr><td>Mailbox server unreachable<\/td><td>The message, encrypted (AES-256-GCM), in the queue<\/td><td>Until delivery or until the timeout expires<\/td><\/tr><tr><td>All decisions<\/td><td>Score and reason, without the content<\/td><td>Technical data kept for statistics<\/td><\/tr><\/tbody><\/table><\/div><p>\u201cNo message storage in normal operation\u201d therefore means: no lasting copy of delivered mail. It does not mean \u201czero data\u201d. The gateway keeps a record of its decisions, and the analysis details for a few days. The timelines are detailed in <a href='\/en\/email-security-logs\/'>Keeping and reviewing email security logs<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3b3500e elementor-widget elementor-widget-text-editor\" data-id=\"3b3500e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>The mail flow, step by step<\/h2><ol><li>A sending server looks up your domain\u2019s MX. It finds the gateway and hands it the message.<\/li><li>The gateway checks the sender (authentication, reputation), the message (links, text, known scenarios), then the attachments.<\/li><li>Clean message: it delivers it to your email system, whatever it is: Microsoft 365, Google Workspace, Exchange, Klytic Mail or another server.<\/li><li>Dangerous message: it goes to encrypted quarantine. The recipient is notified and can release it via a link if it is a mistake.<\/li><li>Rejected message: the sending server receives a rejection and notifies its user.<\/li><li>Your mailbox server does not respond: the message waits, encrypted, and is delivered as soon as the server is back.<\/li><\/ol><p>This flow relies on normal SMTP behavior: a server that receives a temporary error keeps the message and retries. The guide <a href='\/en\/migrate-email-without-downtime\/'>migrating email without interruption<\/a> explains why this mechanism prevents mail loss during an MX change.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-89ca95d elementor-widget elementor-widget-text-editor\" data-id=\"89ca95d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Frequently asked questions<\/h2><h3>Does a small business need security filtering?<\/h3><p>Yes. Email attacks do not choose their targets by size. A gateway is one way to put this filtering in place without changing email systems: see <a href='\/en\/protect-existing-email\/'>Protect the email system you already have<\/a>.<\/p><h3>Does a gateway replace the Microsoft 365 or Google Workspace filter?<\/h3><p>No. The built-in filter keeps working behind it. The vendors describe how to declare a gateway so that their own analysis stays accurate: see <a href='\/en\/protect-existing-email\/'>Protect the email system you already have<\/a>.<\/p><h3>Does the gateway delay mail?<\/h3><p>Analysis adds a step. The visible case is intentional: an unknown sender may be briefly deferred, which weeds out automated sending that never retries.<\/p><h3>Can we change email systems and keep the gateway?<\/h3><p>Yes. The MX still points to the gateway; only the delivery server changes. How a switchover unfolds is described in <a href='\/en\/migrate-email-without-downtime\/'>migrating email without interruption<\/a>.<\/p><h3>What happens to a message set aside by mistake?<\/h3><p>It is in quarantine, not deleted. See <a href='\/en\/quarantine-false-positives\/'>Quarantine, false positives and reports<\/a>.<\/p><h3>How is this different from a dedicated or on-premises email system?<\/h3><p>That is a question about the mailbox, not the filter. It is covered in <a href='\/en\/cloud-dedicated-or-on-premises-email\/'>cloud, dedicated or on-premises email<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9321733 kly-g-klytic elementor-widget elementor-widget-text-editor\" data-id=\"9321733\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Where Klytic fits<\/h2><p><a href='\/en\/klytic-mta\/'>Klytic MTA<\/a> is a gateway of this type. It can be subscribed to on its own, without Klytic Mail, and delivers to Klytic Mail, Microsoft 365, Google Workspace, Exchange or any other mail server.<\/p><ul><li><strong>Essential<\/strong>: authentication and reputation (SPF, DKIM, DMARC including for forwarded messages, domain age, blocklists), anti-spam, antivirus, anti-phishing, lookalike domains and display names, malicious macros and PDFs, encrypted quarantine and release, DKIM signing of outgoing mail, recall before sending, S\/MIME signing of outgoing mail for an email system that does not support it, if the customer enables it and entrusts its key (certificate provision is optional), AI arbitration of ambiguous messages, score and reason in the headers.<\/li><li><strong>Advanced<\/strong>: everything in Essential, plus executive and financial fraud, links rescanned at the time of click, malicious HTML files, the DMARC console and logs exportable to a SIEM.<\/li><\/ul><p>The service can be deployed in the Klytic cloud, on a dedicated instance or on your servers. The Klytic cloud is hosted in any geographic zone matching the applicable jurisdiction, subject to service availability, notably in Europe or Mauritius. Activation generally takes 24 to 48 hours: Klytic prepares the configuration, then you change your domain\u2019s MX, or Klytic does it for you.<\/p><p>What Klytic MTA does not do: it does not replace your email system, its accounts or its permissions, and it only sees the mail that passes through it. For Microsoft 365 and other email systems, see <a href='\/en\/protect-existing-email\/'>Protect the email system you already have<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-be849d7 kly-g-disclaimer elementor-widget elementor-widget-text-editor\" data-id=\"be849d7\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>This page describes a general architecture. The exact configuration depends on your email system and your domains.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-81beb37 kly-g-sources elementor-widget elementor-widget-text-editor\" data-id=\"81beb37\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Sources<\/h2><p>Consulted in October 2026.<\/p><ul><li>RFC 5321, Simple Mail Transfer Protocol: SMTP servers act as mail transfer agents (MTAs); intermediate hosts are generally designated by the DNS MX record. <a href='https:\/\/www.rfc-editor.org\/rfc\/rfc5321' rel='noopener' target='_blank'>rfc-editor.org<\/a><\/li><li>Klytic, Klytic MTA page: modules of the Essential and Advanced plans, options, deployment modes, activation via the MX record, message retention limited to the queue and quarantine. <a href='https:\/\/www.klytic.com\/klytic-mta\/' rel='noopener' target='_blank'>klytic.com<\/a><\/li><li>ANSSI, \u201c10 r\u00e8gles d\u2019or en mati\u00e8re de s\u00e9curit\u00e9 num\u00e9rique\u201d (10 golden rules of digital security): rule 6, \u201cProt\u00e9gez votre messagerie \u00e9lectronique\u201d (Protect your email), describes phishing and recommends being wary of suspicious links and attachments, verifying through another channel and enabling two-factor authentication. <a href='https:\/\/cyber.gouv.fr\/securisation\/10-regles-or-securite-numerique\/' rel='noopener' target='_blank'>cyber.gouv.fr<\/a><\/li><li>ANSSI, \u201cGuide d\u2019hygi\u00e8ne informatique\u201d (IT hygiene guide), version 2.0, September 2017, measure 24 \u201cProt\u00e9ger sa messagerie professionnelle\u201d (Protect your business email): \u201cEmail is the main vector for infecting workstations\u201d (translation). <a href='https:\/\/messervices.cyber.gouv.fr\/documents-guides\/guide_hygiene_informatique_anssi.pdf' rel='noopener' target='_blank'>messervices.cyber.gouv.fr<\/a><\/li><li>ANSSI, MonServiceS\u00e9curis\u00e9, catalog of measures, measure \u201cMettre en \u0153uvre une solution d\u2019anti-spam et d\u2019anti-hame\u00e7onnage\u201d (Implement an anti-spam and anti-phishing solution): \u201cEmail systems are one of the main attack vectors since they are very widely used and exposed on the Internet\u201d (translation). <a href='https:\/\/monservicesecurise.cyber.gouv.fr\/referentiel-mesures' rel='noopener' target='_blank'>monservicesecurise.cyber.gouv.fr<\/a><\/li><li>ANSSI, \u201cRecommandations relatives \u00e0 l\u2019interconnexion d\u2019un syst\u00e8me d\u2019information \u00e0 Internet\u201d (Recommendations on connecting an information system to the Internet), ANSSI-PA-066, version 3.0, June 19, 2020, chapter 5 \u201cS\u00e9curisation du service de messagerie \u00e9lectronique\u201d (Securing the email service): email \u201chas become one of the main vectors of cyberattacks\u201d (phishing, malicious attachments); \u00a7&nbsp;5.2.3, anti-spam and malicious-content detection mechanisms \u201cmust be implemented\u201d (translation). <a href='https:\/\/messervices.cyber.gouv.fr\/guides\/recommandations-relatives-linterconnexion-dun-si-internet' rel='noopener' target='_blank'>messervices.cyber.gouv.fr<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-4d94b5b e-con-full kly-g-aside e-flex e-con e-parent\" data-id=\"4d94b5b\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3254010 elementor-widget elementor-widget-html\" data-id=\"3254010\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"html.default\">\n\t\t\t\t\t<nav class=\"kly-g-toc\" aria-label=\"On this page\"><p>On this page<\/p><ol><\/ol><\/nav>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7096263 elementor-widget elementor-widget-text-editor\" data-id=\"7096263\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"kly-g-cta\"><h3>Place a gateway in front of your email<\/h3><p>Free 30-day trial, without changing email systems.<\/p><p><a class=\"kly-g-btn\" href=\"\/en\/contact\/\">Talk to an advisor \u2192<\/a><\/p><p style=\"margin:0\"><a class=\"kly-g-btn ghost\" href=\"\/en\/klytic-mta\/\">Discover Klytic MTA<\/a><\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7b59e09 e-con-full kly-g-related e-flex e-con e-parent\" data-id=\"7b59e09\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3228af6 elementor-widget elementor-widget-text-editor\" data-id=\"3228af6\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Further reading<\/h2><div class=\"kly-g-grid\"><a class=\"kly-g-card\" href=\"\/en\/protect-existing-email\/\" style=\"--cat:#dc2626\"><span class=\"c\">Understand \u00b7 Email security<\/span><span class=\"t\">Protecting the email system you already have<\/span><span class=\"q\">Microsoft 365, Google Workspace, Exchange: you can add a security gateway without changing email services. What changes, who sets it up, the limits.<\/span><span class=\"m\"><span>7 min read<\/span><b>Read \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/en\/spam-phishing-malware-compromised-account\/\" style=\"--cat:#dc2626\"><span class=\"c\">Understand \u00b7 Email security<\/span><span class=\"t\">Spam, phishing, malware and compromised accounts<\/span><span class=\"q\">Four threats come through the same door and are not handled the same way. What gives each one away, what stops it, and why anti-spam alone is no longer enough.<\/span><span class=\"m\"><span>6 min read<\/span><b>Read \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/en\/quarantine-false-positives\/\" style=\"--cat:#dc2626\"><span class=\"c\">Use \u00b7 Email security<\/span><span class=\"t\">Quarantine, false positives and reporting<\/span><span class=\"q\">What happens to a message held by Klytic MTA, how to release it, correct a false positive and report a malicious message.<\/span><span class=\"m\"><span>6 min read<\/span><b>Read \u2192<\/b><\/span><\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-539316dd e-con e-atomic-element e-div-block-base e-default-div e-c9fd865-4a50 \" data-id=\"539316dd\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"539316dd\" data-e-type=\"e-div-block\" data-id=\"539316dd\">\n    <div class=\"elementor-element elementor-element-4f79afcb e-con e-atomic-element e-div-block-base e-default-div e-4fa9fe-ce86 \" data-id=\"4f79afcb\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"4f79afcb\" data-e-type=\"e-div-block\" data-id=\"4f79afcb\">\n    \t\t\t<p class=\"e-4dcf5c70-2ec7 e-paragraph-base e-default-p\" data-interaction-id=\"330a7a35\" data-e-type=\"widget\" data-id=\"330a7a35\">Welcome offer<\/p>\n\t\t\t\t\t<h2 data-interaction-id=\"56f1f7d5\" class=\"e-347faa43-4e20 e-heading-base e-default-h2\" data-e-type=\"widget\" data-id=\"56f1f7d5\">30-day free trial, assisted migration<\/h2>\n\t\t\t\t\t<p class=\"e-7f6310da-1caa e-paragraph-base e-default-p\" data-interaction-id=\"2ce27288\" data-e-type=\"widget\" data-id=\"2ce27288\">No-commitment trial offer. An advisor will call you back to understand your needs and prepare your Klytic space.<\/p>\n\t\t<div class=\"elementor-element elementor-element-35ea29a1 e-con e-atomic-element e-div-block-base e-default-div e-1cd48b22-e6da \" data-id=\"35ea29a1\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"35ea29a1\" data-e-type=\"e-div-block\" data-id=\"35ea29a1\">\n    \t\t\t<a href=\"https:\/\/eu.klytic.com\/en\/30-day-free-trial\/\" target=\"_self\" class=\"e-4a7886e3-652d e-button-base e-default-a\" data-interaction-id=\"19bfa8f1\" data-e-type=\"widget\" data-id=\"19bfa8f1\">\n\t\ud83d\ude80 Start free trial\n<\/a>\n\t\t\t\t\t<a href=\"https:\/\/eu.klytic.com\/en\/pricing\/\" target=\"_self\" class=\"e-137e863d-dd0d e-button-base e-default-a\" data-interaction-id=\"326d82ab\" data-e-type=\"widget\" data-id=\"326d82ab\">\n\tSee pricing\n<\/a>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"Built-in filter or email security gateway | Klytic","_seopress_titles_desc":"Filter included in your email system or SMTP gateway placed in front: analysis before or after the mailbox, mail flow, and what the gateway keeps.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"Built-in filter or email security gateway | Klytic","_seopress_social_fb_desc":"Filter included in your email system or SMTP gateway placed in front: analysis before or after the mailbox, mail flow, and what the gateway keeps.","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"Built-in filter or email security gateway | Klytic","_seopress_social_twitter_desc":"Filter included in your email system or SMTP gateway placed in front: analysis before or after the mailbox, mail flow, and what the gateway keeps.","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"class_list":["post-6430","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/eu.klytic.com\/en\/wp-json\/wp\/v2\/pages\/6430","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.klytic.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eu.klytic.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eu.klytic.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.klytic.com\/en\/wp-json\/wp\/v2\/comments?post=6430"}],"version-history":[{"count":0,"href":"https:\/\/eu.klytic.com\/en\/wp-json\/wp\/v2\/pages\/6430\/revisions"}],"wp:attachment":[{"href":"https:\/\/eu.klytic.com\/en\/wp-json\/wp\/v2\/media?parent=6430"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}