Mail Gateway
A significant portion of threats originate from links or attachments in email bodies. It is critical to analyze everything before forwarding such requests to the user. Integrating links with Web Isolation under the Proxy header for access is the safest approach.
Analysis of attachments and links can be done on devices or Sandbox devices can be used for ZeroDay analysis of attachments. Since this is covered under the Sandbox section, further details will not be provided. The same features mentioned under the Web Proxy header also apply to email. Using separate sandbox devices for Web and Mail is important both in terms of cost and security perspective. For instance, a web sandbox device operating in flow mode may not be compatible with a mail sandbox device.