Things to Know About Proofpoint URL Defense

Created by Abderrahim Ibnou el kadi, Modified on Mon, 13 Jan 2020 at 03:03 PM by Jason Carreiro

The below information will answer the question you have about URL defense. So do you know:

What packages is URL Defense included in? 

  • URL Defense is included in the Business, Advanced and Professional packages.

How is URL Defense enabled? 

  • URL Defense can be enabled or disabled on the Proofpoint Essentials features page. URL Defense is disabled by default.

Are there messages that will not be defended? 

  • URLs contained within Encrypted / protected messages will not be defended.
  • DKIM signed messages are re-written by default. Customers can change their configuration to disable DKIM re-writing.


How can you confirm if a URL has been re-written? 


What happens when a user clicks on a re-written URL? 

  • The user is redirected to the Proofpoint URL Defense service where the URL and website is analyzed.
  1. If the URL is considered bad: The user will be shown a page informing them "The website has Been Blocked!".
  2. If the URL is considered good: The user will be re-directed to the website.

Will all URLs in a message be defended? 

  • URLs located in attachments are not re-written. Please refer to the table below to see additional details.

Is there a noticeable delay when a user clicks on a defended URL? 

  • No. Defended URLs are checked real-time to ensure that the latest status determines it to be safe.

Is URL Defense available for customers on trial? 

  • Yes.

How long will defended URLs continue to work? 

  • Defended URLs will not expire. They will continue to function indefinitely.
  • If the redirection services is not available (i.e., we cannot verify the links reputation) we will redirect to the original link.

Will URL Defense protect a URL that is safe at one-time but becomes compromised later? 

  • Yes. Each time a URL is clicked the status of that URL is verified before the redirect is allowed.

How many URL Defense redirectors are there and is the service highly available?

  • Proofpoint has multiple redirectors per location and across multiple DCs.