Description
Shield is a zero-trust email security solution. Each Shield user has their own individual network of trusted senders that begins building on day one. Because of the zero-trust model, trusted senders may not deliver to a Shield user's Inbox if a moderate or high risk is detected within the message, or if other bad signals are detected which indicate the message is unsafe.
The Trust Network
At the start of Shield deployment, no senders are trusted for any Shield organization user.
Over the first 24 hours of deployment, Shield performs the following action for each Shield user:
- Organization addresses are added (internal emails)
- Ancestor Trust is applied so that parent organization addresses are trusted for customer organizations
Shield also reviews the user's Microsoft Sent Items folder interactions and builds an initial Trust Network unique to the user:
- The user's contact list addresses are added
- The user's Sent Items folder is reviewed:
- Senders from the first 1000 emails are trusted during onboarding
- If there are more messages, Shield processes messages 1000 at a time asynchronously as a background job
- It will only look at emails up to 12 months old
Over time, users can add more trusted senders to their Trust Network and customize Risk Levels per sender. Because Shield factors in the sender's trust and insights into the individual message, the Trust Network cannot override moderate or high-risk message delivery unless a workflow is enabled to do so.
Shield Users
Users can view their individualized Trust Network list of all trusted and silenced senders.
Recent Changes
Clicking on Recent Changes shows the last 25 changes to the user's Trust Network.
Contact Name and Addresses
Clicking a specific contact allows the contact's name and address, delivery preferences, and associated risk levels to be changed. If the contact is not a member of the organization or parent organization, the option to Remove the contact will also be available.
Click on Edit to update the sender's name and the addresses associated with the sender.
Domain Trust
Click on Apply to Domain to trust all senders from the domain. When a message is covered by a domain rule, the X-ray view shows a "Trusted by domain" or "Silenced by domain" indicator. Domain entries in your trust network get their own contact page showing the domain's favicon and all recent messages from that domain, not just a single address.
Delivery
New senders can be trusted or silenced within the Shield user's Inbox or from within the Shield Portal.
Trusted senders will deliver to the Inbox or Bundler* if the message is found to be Low or No Risk. Silenced Senders can be sent directly to Jail, Junk, Trash (Deleted Items), or Archive.
*Bundler is a Shield Pro feature.
Risk Levels
The Risk Levels of a specific sender, trusted or silenced, can be adjusted via their contact page.
Shield Admins
Shield Advisors, Administrators, and Superusers can access a user's Trust Network via the User Page.
They can also trust or silence senders to a Shield user via Spotlight. The Admin can view the X-ray of a message from the sender to a Shield user, click on the Sender, and change the trust decision. Admins can also make Risk Level, contact name, and address changes for the individual sender to the Shield user.
Updated