What is 3N1 Email Protection?

​

3N1 Email Protection is an email product that uses sophisticated machine learning and artificial intelligence to analyze incoming messages for signs of phishing, spam, and other email-based threats.

​

Why do I see these banners at the top of my email?

The banners are inserted by 3N1 Email Protection to alert you of any threats in your emails. The banners also display the email sender’s address and mark if an email is internal (from someone in your organization) or external. If you see these banners, your IT staff has deployed Email Protection and included you in the protected user group.

​

What do the different banner colors mean?

A gray banner indicates that 3N1 Email Protection did not find anything unusual or suspicious about the message. Even though the message was not classified as threatening, you should always check the displayed sender address and the source type to be sure it makes sense (e.g., an external webmail address for a message from a colleague may be cause for concern).

​

A yellow banner indicates that Email Protection found something unusual about the email message. It is not necessarily phishing or dangerous, but something you should be aware of. For example, a request for sensitive personal information should be scrutinized. Mail that seems out of the ordinary or is spam in some way may receive a yellow banner.

.

A red banner indicates that Email Protection thinks the message is suspicious and likely to be phishing or dangerous in some other way. This includes brand impersonations (e.g., a fake “account alert” email from your IT department), blacklisted phishing URLs, or attempts to spoof mail to look like it came from an internal company account.

​

What should I do if I receive an email with a yellow banner?

Look carefully at who the mail is from and whether it is from a source you trust. Be especially careful about clicking any links in the body of the email or opening any attachments.

​

What should I do if I receive an email with a red banner? Why did I receive it if it’s considered dangerous?

In most cases, you can delete the message and move on. In many 3N1 Email Protection deployments, your IT staff, security team, or email administrator will configure your mail server to quarantine or delete “red flagged” mail before it reaches your mailbox. In other cases, the mail will still be delivered with the banner telling you to be careful.

​

What does the “Report This Email” link do? How do I provide feedback on 3N1 Email Protection’s analysis?

If you think 3N1 Email Protection has made a wrong classification, or if you want to confirm that Email Protection got it correct, click the “Report This Email” link found in the bottom-right corner of each banner.

This will take you to a web form where you can indicate that the message is genuinely Safe, Spam, or Phishing. You can also provide a comment describing your assessment. This feedback is used to improve Email Protection’s future predictions automatically. Your submissions are also manually reviewed to improve the overall system and ensure Email Protection provides the most accurate security possible.

​

Why do I see a 3N1 Email Protection page when I click a link in an email?

Part of 3N1 Email Protection is the ability to perform real-time checks on any links you click. If this feature is enabled, clicking on links in a yellow or red banner email will take you to a page reiterating that Email Protection found the message unusual or suspicious. Sometimes, a statement that initially only had a grey banner contains a link later detected as a dangerous phishing URL. In that case, when you click the link, Email Protection’s real-time check will see that you clicked on a bad link, and you’ll be met with a blocker page alerting you of that fact.

​

What should I do if I have questions or comments about the 3N1 Email Protection service?

Please contact your IT staff, security team, or email administrator, who can pass your feedback on to the appropriate 3N1 support person. They will be able to fine-tune your Email Protection policies and settings to help make things work as smoothly as possible. You can submit a ticket below, and we will start the issue.