CIS Control 9 Safeguards for the email and web attack surface: supported browsers and email clients, DNS and URL filtering, browser and email extensions, DMARC, file type blocking and email server anti-malware.
Allowing only fully supported browsers and email clients, on the latest vendor-provided version, to run in the enterprise: the IG1 software baseline for the email and web attack surface.
DNS filtering on every end-user device, remote or on premises, to block known malicious domains: the second IG1 Safeguard in Control 9.
Network-based URL filtering, by category, reputation or block lists, enforced for all enterprise assets to stop connections to malicious or unapproved websites.
Uninstalling or disabling browser and email client plugins, extensions and add-ons that are unauthorized or unnecessary, with separate enforcement metrics for browsers and email clients.
Publishing and verifying a DMARC policy to reduce spoofed or modified email from valid domains, starting with SPF and DKIM.
Blocking file types the enterprise does not need at the email gateway, before they reach users.
Anti-malware protection on email servers, such as attachment scanning or sandboxing: the IG3 Safeguard in Control 9.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.