Phish Blocker Technical Specifications

Identity Theft Blocker is an intelligent email filter that identifies phish—email containing fraudulent links or information stealing code. Identity Theft Blocker can scan any email that is transported by the following protocols:

  • SMTP
  • POP
  • IMAP

What It Does

Transparently scans SMTP, POP and IMAP traffic for phish signatures


How It Does It

Based on ClamAV engine and phish signature database


Controls

  • Can be configured to scan incoming and/or outgoing by traffic type
  • In addition:
    • SMTP: action on detection can be set to quarantine, block, mark or pass message with or without sender notification
    • POP and IMAP: action on detection can be set to mark or pass message (the nature of POP and IMAP protocols prevent messages from being blocked or quarantined)