DOCUMENTTYPESOLUTION BRIEF

Isolate Suspicious Email Links
Neutralize malicious email links while ensuring
disruption-free productivity

Safely click unknown links with email
link isolation
Challenge: Protecting against deceptive email links
As modern phishing attacks become more evasive andsophisticated, even the best trained users (andsecurity solutions) struggle to accurately detectmalicious links 100% of the time. This results in:●●●Greater risk: Allowing unknown email links tobe clicked by end users presents additional
opportunities for exploitation.
Workflow disruption: Having to block orinvestigate unknown email links can delay
normal business activity.
More time and effort: Investigating unknown
email links and false positives can consume asignificant amount of time and resources.

With email being the #1 most used and most exploited
business application, attackers often use embedded
email links as a means to expose users to malicious
web content that can lead to account compromise ordata exfiltration.

Solution: Integrated cloud email security + remotebrowser isolation
Email link isolation from Cloudflare Area 1
automatically applies adaptive isolation to unknown
email links to insulate users from malicious content
and remove the burden of managing complex policies.
Opening suspicious email links in an isolated browser
neutralizes any potential malware by running all codein the cloud, far away from the user and their device.

Key benefits:

Reduce risk
Minimize attack surface
and exposure by insulating
your users from untrusted
web content andmultichannel phishing
threats.

Drive productivity
Ensure uninterrupted
productivity for end users bydelivering the mostseamless, low-latencybrowser isolation experienceon all device types.

1 888 99 FLARE | enterprise@cloudflare.com | www.cloudflare.com

Remove complexity
Reduce false positives whilesaving IT and SecOps time byautomatically allowing all
unknown and suspicious links tobe clicked safely.

REV: PMM-2023JAN

Email link isolation from Cloudflare Area 1
Defend against new multichannel threats
Threat actors are increasingly targeting individual users through multiple
channels of communication (email, web, SMS, and more), often
leveraging email as the initial attack vector. These multichannel phishingattacks commonly employ malicious email links and use evasive tactics
that bypass traditional security controls. Examples include:● Deferred phishing: An initially benign link within an email is later
weaponized to point to a malicious destination after delivery.
● Cloud service phishing: Dangerous HTTPS links closely resemble
common cloud services (e.g. Google Drive, Box).

Minimize risk without compromising user experience“We started using
Cloudflare Zero Trust
services with Browser
Isolation to help provide
the best security for ourcustomers’ data andprotect employees frommalware. It worked sowell I forgot it was on.”Jonathan Lister Parsons
CTO, PensionBee

By integrating next-generation browser isolation capabilities built on
our unique Network Vector Rendering (NVR) technology, Area 1 isable to deliver a seamless, secure, and scalable solution for isolating
suspicious email links.
Unlike bandwidth-heavy techniques, NVR streams safe drawcommands to the device. This helps eliminate the risk of untrusted
code running on the device, or impacting the end-user experience.
Cloudflare Browser Isolation runs a headless version of the Chromiumbrowser, which renders all browser code at our edge instead of on
the end-user device, to mitigate known and unknown threats likemalware. The low-latency experience is invisible to end users andfeels just like a local browser.

How email link isolation works

1. Email Analysis
Inbound email isanalyzed using
Cloudflare Area 1
threat intelligence
to classify as
malicious, benign,
or suspicious

2. Link Isolation
If classified assuspicious, link
is rewritten to acustom
Cloudflare prefixURL

3. Email Delivery
Email isdelivered to theintended inbox

1 888 99 FLARE | enterprise@cloudflare.com | www.cloudflare.com

4. Time-of-Click
When user clicks
on rewritten link,system does atime-of-click
analysis todetermine linkclassification

5. Interstitial Page

6. Isolated Browsing

If link is stillclassified assuspicious, theninterstitial pageis displayed towarn users andoffer browser
isolation

When user clicks‘Open in Remote
Browser’, anisolated browser
session loads inthe closest PoP
on the Cloudflare
network

REV: PMM-2023JAN

The power of extending Zero Trust protection to email security
Secure hybrid work with Zero Trust

Cloud email security: Core to Zero Trust

Cloudflare Zero Trust increases visibility, eliminatescomplexity, and reduces risks as remote and officeusers connect to corporate applications and thepublic Internet.

Cloudflare Area 1 email security enhances Zero Trustby removing implicit trust from email to preemptively
stop phishing and business email compromise (BEC)
attacks.

Cloudflare offers the most comprehensive Zero
Trust approach by providing visibility and control
across all internal and external network, web, andemail traffic; delivering layered security that is easily
tailored to each organization.

Never trust any sender, even if internal. Instead,ensure all user traffic, including email, is verified,filtered, inspected, and isolated from Internet threats.
Area 1 is integrated across Cloudflare’s Zero Trust
platform, delivering a more seamless set of solutions.

Internet Apps

Any User

SecureaccessInternet
gateway

SaaS appsecurity

Browser
isolation

Emailsecurity

Data loss
prevention

All edge services on
one network with
one control plane

Secure accesssimplify and secure accessbetween any user and app,on any device, in any location
Threat defense
keep your users and data
safe from web, email, andmulti-channel threats

Self-Hosted
Apps

SaaS Apps

Secure with Microsoft
visibility and control of
all SaaS suites across
Microsoft, Google, and more
Secure hybrid work
improve team productivity,
reduce cyber risk, andincrease tech efficiency

Discover which attacks your current email
security systems miss - at no cost and no impact
to your end users. Request a complimentary
Phishing Risk Assessment today.

1 888 99 FLARE | enterprise@cloudflare.com | www.cloudflare.com

REV: PMM-2023JAN