What's New in Cloud Email Protection

Fortra is always working to improve the Cloud Email Protection product, from fixing issues to improving existing features to adding new features. This topic highlights the feature changes made in Fortra Cloud Email Protection, as well as documentation updates not necessarily related to product features.

Release	Date	Update Details
2025.05	May 2025	New and Updated Organization page. See Organization Settings. Updated Organization Audit Trail page. See View Organization Activity. New and Updated images in Executive Report, See Executive Summary Reports, How Many Attacks Were Found Report, How Attacked/Protected Am I Relative To My Peers Report, Money Saved by Deploying Cloud Email Protection Report
2025.04	April 2025	On-Prem Sensor Updates: Fixes UI based sensor upgrade bug. Adds support for podman container management software. Adds support for the following OS versions: Ubuntu 22.04, Ubuntu 24.04, RHEL 8, RHEL 9. Various bug fixes.
2025.02	February 2025	Updated steps to Create the Journaling Rule , seeConfigure Dual Delivery: Office 365 . Minor edits and fixes.
2024.11	November 2024	New and updated Manage Senders page.
2024.10	October 2024	Support for Microsoft Graph based enforcement using on-prem sensors. See Configure Enforcement: Office 365 using MS Graph for On-Prem Sensor New and Updated User page. New feature View Untagged Domains in Domains page. See View Untagged Domains New CDR filter option to filter Events based on the CDR Event Name. See View Continuous Detection and Response Events New Cloud Email Gateway Journaling Status Page. See Journaling Status Various bug fixes
2024.07	July 2024	On-Prem Sensor Updates: Added support for AWS key rotation for on prem sensors. Added support for a new attachment scanning vendor. Various bug fixes. Various dependency updates.
2024.06	June 2024	Introducing the New Cloud Email Gateway an advancement in the architecture of CEP. See Cloud Gateway. Updated Message Search for Active Content and QR Code updates. See Message Search. Updated Policy with for Active Content and QR Code updates. See Policy Settings. Updated DSL page for Active Content updates. See Domain Specific Language Reference. Added new Download CSV feature in Domain Tags. See Domain Tags. New and updated Domain Tags page. See Domain Tags. Updated adding a tag to a domain steps, see Add a Tag to a Domain. Updated deleting a tag to a domain steps, see Delete a Tag from a Domain. New and updated Domain Details page, see View Domain Details. New and updated IP Address page, see View IP Address Details.
2024.04	April 2024	Added new feature Display Name field details in Adjustments. See Adjustments. Updated To field name to Recipient in Policy. See Create a Test Policy and Policy Settings. Update Azure AD Sync to Microsoft Entra Connect Sync. See System Notification Settings. Updated Address Group Page. See Address Groups Images updates and minor edits. See Authorize Address Group Synchronization. New CSV Address Group feature for importing Address Group. SeeCreate an Address Group , Edit an Address Group New Carousel Tile feature and Message Over Time bar chart in the CEP Overview page. See Cloud Email Protection Overview. Minor updates to Configure Dual Delivery: Office 365. See Configure Dual Delivery: Office 365 The Moved to Inbox option is now a Top Level Option and not under Enforced in the Message Search page. See Message Search.

2023

Release	Date	Update Details
2023.12	December 2023	Introducing New Technical Support Portal Fortra Support Portal (FSP). See Support Updated User Guide to reflect the Rebaranding of Agari Phishing Defense to Fortra Cloud Email Protection. A new dashboard page for unique visualization of the risk overview of your organization's inbound email traffic, see Cloud Email Protection Overview All new and updated Policy pages, see Create a Policy,Policy Settings,Create a Test Policy Updated On demand Policy page, see On-demand Policies, Create an On-Demand Policy Updated System Notification pages, see Add a Notification Recipient, Delete a System Notification Recipient Updated Enforcement page with Enforcement Policy setting details, see Enforcement Updated images to reflect the New Cloud Email Protection Icon, see Attack Classifications Updated CDR pages for CEP updates, see Continuous Detection and Response, Continuous Detection and Response Events, View Continuous Detection and Response Event Details
2023.11	November 2023	Introducing New Technical Support Portal Fortra Support Portal (FSP). See Support
2023.09	September 2023	On-Prem Sensor Updates: The OVA admin dashboard is now disabled during upgrades from pre-23.03 sensors. It is important to note that the dashboard is already disabled for new installations. Attachment scan results are now cached for 60 seconds to reduce calls to the attachment scanning service. Fixed an issue in the admin dashboard status command that would show the status as "enabled" even if the service was disabled. The Sensor will first try to load both static and dynamic configurations before attempting to login to the remote docker registry for upgrades. The attachment scanning service license will update automatically from now on. Documented general guidelines for on-prem sensor Installation / Upgrade. See Sensor Installation.
2023.08	August 2023	Renamed Whitelists to Allow list in the User Guide. Removed all reference to Whitelist email/ Server configuration. Adjustments feature has been improved. Manual Adjustments can now be performed from Adjustments page for Email Address and URL adjustment types. See Adjustments. Minor edits and fixes. Image updates and minor edits in Configure Dual Delivery: G Suite.
2023.05	May 2023	Minor edits and fixes.
2023.04	April 2023	Updated User Guide for CDR changes. Removed details on APD app. See: Continuous Detection and ResponseContinuous Detection and Response Events, View Continuous Detection and Response Events, View Continuous Detection and Response Event Details, Change the State of a Continuous Detection and Response Event, Modify a Continuous Detection and Response Event Action
2023.03	March 2023	Updated User Guide and API Documentation Guide as per Fortra ( the new face of Helpsystems ) re-branding guidelines. SenderBase Reputation Score (SBRS) service is now replaced with an IP Reputation service and scores are presented as IP Reputation. On-Perm Sensor updates: Exchange (EWS) enforcement now supports OAuth authentication Additional recipients are detected in the CC headers of internal messages Removed dependencies: Python, PyYAML, AWS CLI, netstat Improved auto-install support for Docker Improved SELinux compatibility Improved container size and shortened time of upgrades and service start/stop Fixed an issue to add primary address resolution in EWS enforcement when Autodiscover is disabled Fixed an issue with URI extraction from encoded message bodies Fixed an issue for a file handle leak in the host agent that may have caused Sensors to fail under load Fixed an issue for a race condition on startup that may have caused GSuite enforcement to fail Fixed an issue for a data persistence that may have caused GSuite enforcement actions to be lost on shutdown Fixed an issue for a header folding in inline Sensors that caused messages to become malformed. See Sensor Prerequisites, Configure Dual Delivery: Microsoft Exchange, Enforcement, Configure Enforcement: Microsoft Exchange

2022

Release	Date	Update Details
2022.12	December 2022	Updated Hardware and Software Requirements for sensor deployment. See, Sensor Prerequisites.
2022.10	October 2022	CDR enforcement limit is 10,000 with Graph API. Updated Domain Specific Language Reference and Create On demand policy to indicate the same, see Domain Specific Language Reference, Create an On-Demand Policy. Enforcement status on Sensors page is not available when Graph Enforcement is Enabled. Updated Sensor pages to indicate the same, see Enforcement Sensor Status, View Sensor Status Rapid DMARC policy Trust score is now a 0-10 range, updated Rapid DMARC policy with new image and details. See Sender Management With Rapid DMARC.
2022.08	August 2022	Updated Organization Setting, Documented Microsoft API Permissions tab, and the new Disable Ingest / Enforcement feature, see Organization Settings. Updated Configure Enforcement: Office 365. Office 365 will use only MS Graph API for enforcement, see Configure Enforcement: Office 365 using MS Graph API for Hosted Sensor
2022.07	July 2022	Updated Domain Tags, to reflect new Domain Tags features (Domains with Traffic and All Domains with Tags), see Domain Tags.
2022.06	June 2022	Fortra Cloud Email Protection Community Feed has been renamed to Community Intelligence Feed to support PhishLabs IOCs in CDR. This feature is now available for all CEP customers, so the field indicating Number of Participants has been removed. Updated images in Continuous Detection and Response.
2022.04	April 2022	Minor edits and fixes.
2022.02	February 2022	Updated all images to match the current application UI.
2022.01	January 2022	Update Cisco CES/ESA BCC configuration to remove outdated "Tomki" screen shots. See Configure Dual Delivery: Cisco ESA Added a Note to explain partial and/or wildcard matching in search, real-time policies, and CDR. See Attachment and URI Analysis Updated the steps for whitelisting Alert Server. See Configure Dual Delivery: Office 365

2021

Release	Date	Update Details
2021.10	October 2021	Updates to Block URL, to reflect new URL adjustment features, see Scoring Adjustments
2021.03	March 2021	Added the new CDR Event Pending state, see Change the State of a Continuous Detection and Response Event Added MS Graph API support and features, see Configure Enforcement: Office 365 using MS Graph API for Hosted Sensor

2020

Release	Date	Update Details
2020.12	December 2020	Updates to enforcement button behavior, see Create a Policy
2020.10	October 2020	Minor updates and bug fixes
2020.09	September 2020	Trust score tuning feature phase one added and documented, see Scoring Adjustments Added instructions to reboot the sensor after upgrading on Microsoft Exchange. See Configure Enforcement: Microsoft Exchange
2020.08	August 2020	Updated the CDR Rule DSL syntax description to reflect a new restriction that returns an error when multiple uses of the same field-operator combination are joined with AND. See Domain Specific Language Reference Updated the list of URLs required for the sensor installation script. See Sensor Prerequisites
2020.07	July 2020	Download of sensor diagnostic files is only available for on-premises sensors, not for hosted sensors. See note in Download Sensor Diagnostic Information Added Permanent Error to list of possible message SPF results in Continuous Detection and Response Rules. Added a note recommending increasing Microsoft Exchange maximum message size on Agari send connector to 100MB. See Configure Dual Delivery: Microsoft Exchange.
2020.06	June 2020	Significant changes to the search language that you can use to create continuous detection and response (CDR) rules have been made. See Domain Specific Language Reference for details. The ability to create custom, local continuous detection and response (CDR) rules has been added. See Continuous Detection and Response Rules.
2020.04	April 2020	(CDR) rules added. See Continuous Detection and Response Rules.
2020.03	March 2020	Message details now provide additional insight into how a message score and attack classification was determined. Attack Classifications shows details for the different attack types.
2020.02	February 2020	Processing exceptions can now be defined so messages will not be evaluated. See Organization Settings for details. Message details now have a CDR (see Continuous Detection and Response) link. See View Message Details for more information.
2020.01	January 2020	Fortra Cloud Email Protection is the new name for Advanced Threat Protection. You will see the new naming and an updated logo throughout the product. The Continuous Detection and Response (CDR) feature has been improved. CDR now also takes threat intelligence from the Agari Business Email Compromise (BEC) feed, sourced by the Agari Cyber Intelligence Division (ACID), to search for indicators of compromise (IOCs) in employee inboxes. Clarified that on-demand policies created from search results can only apply to inbound messages. This is relevant when insider impersonation is enabled and inbound, outbound, and internal messages are being ingested by the Sensor. See Create an On-Demand Policy for details.

2019

Release	Date	Update Details
2019.12	December 2019	Clarified mail routing configuration for G Suite. See Configure Dual Delivery: G Suite. Added section on Skipped Addresses for Azure Active Directory address group syncronization. See Microsoft Entra ID (formerly Azure AD) Synchronization With Address Groups. Added information about the Allowed Forwarding IPs setting in the Sensor Settings section of organization settings. See Organization Settings.
2019.11	November 2019	Updated the Sensor requirements. On-premises Sensors now require Python 2.7 or newer.
2019.10	October 2019	The guide used "global administrator" in a couple of places that were causing confusion, leading users to believe that the role was required for Cloud Email Protection to access their systems. In reality, certain access permissions are required just to configure those systems to allow access by Cloud Email Protection. The content was changed in those places to more accurately reflect this. Clarified when the View AIR Investigation link is visible in Continuous Detection and Response events. See View Continuous Detection and Response Event Details. Google changed its terminology, no longer referring to "Google Developers Console." The topic for configuring enforcement in G Suite was updated to reflect Google's new nomenclature. Clarified that Agari employees cannot make changes to Cloud Email Protection user accounts. See User Accounts. Plain text search fields in Cloud Email Protection are now limited to 100 characters.
2019.09	September 2019	Cloud Email Protection has added insider impersonation protection (IIP), giving you 360-degree monitoring of your mail stream: incoming messages, outgoing messages, and internal messages. IIP requires Microsoft 365 or Exchange as your email provider and you must: Explicitly enable this feature in your organization settings. See Messages Settings for more information. Insure the proper directionality headers are added to all messages. See Configure Dual Delivery: Office 365 and Configure Dual Delivery: Microsoft Exchange for more information. Message directionality is also available in search and policy criteria. See Message Search and Policy Settings for more information.
2019.08	August 2019	In message searches and policy settings, for parameters that are numeric and have upper and lower bounds, the upper and lower bound values are now inclusive.
2019.07	July 2019	The attack vs. peer enforcement graph has been enhanced to clarify its values. See How Attacked/Protected Am I Relative To My Peers Report. Information about how to prepare for using Cloud Email Protection (see Before You Begin) and how to access the Cloud Email Protection API documentation (see Application Programming Interface) has been added to this guide. Additional detail about default policies has been added to this guide. See Default Policies.
2019.06	June 2019	Cloud Email Protection no longer officially supports Sensors in an inline architecture, so that information has been removed from this guide. Reference content for message search has been added. See Message Search for details. Message search results can now be downloaded. See Download Message Search Results for details.
2019.05	May 2019	Most of the changes in this version of the guide are correction, clarifications, updates because other systems changed, and bug fixes.
2019.04	April 2019	Cloud Email Protection's Continuous Detection and Response (CDR) is now available. CDR is an Agari Secure Email Cloud technology that allows organizations to prevent or mitigate data breaches as new threat intelligence is discovered. CDR is available to Cloud Email Protection customers who also have a subscription to Agari Phishing Response. Contact support to understand the requirements for obtaining CDR. See Continuous Detection and Response for details. Agari's Secure Email Cloud (SEC) also includes a mobile application that allows you to monitor and take actions on continuous detection and response (CDR) events. See Agari App for details. The guide clarifies who can change report values. See Configure the Money Saved By Deploying Cloud Email Protection Report for details. Additional information about how the internal and partner tags are used and best practices for applying them to domains was added to the Domain Tags topic. See Domain Tags for details.
2019.03	March 2019	You can now set custom date ranges for the Threat Trends and Executive Summary reports. Clarifications were added for Sensor port requirements and for supported Sensor architecture. Additional organization settings are available for how an organization is classified. These classifications, including region, industry, and organization size, are used for one of the executive summary reports. See Money Saved by Deploying Cloud Email Protection Report.
2019.01	Winter 2019	Reporting improvements A new set of reports are available in Threat Trends and Executive Summary tabs on the home page, reports that provide at-a-glance views of the benefits of using Cloud Email Protection. These reports show a daily updated view of the value that Cloud Email Protection provides, and you can download a snapshot of either page as an Adobe Acrobat (PDF) file. Additional organization settings allow customization of the message data in the reports. Find out more in Threat Trends Reports and Executive Summary Reports. Message feedback improvements Cloud Email Protection now allows you to provide more details when sending feedback about an individual message. See Send Message Feedback for details.