It is a solution to protect email communication. It is not only protection against spam, but also against phishing attacks, malicious code and ransomware. During the scanning of an email message, several security layers are used to ensure that as much malicious content as possible is intercepted by the email security gateway.
A lot of information is collected before the email is sent. This is based on the Cisco Talos reputation database, which contains current and historical data on malicious IPs, domains, sender reputation, etc. During the scan, the message is scanned with an antivirus and compared to data from the sandbox (Cisco Malware Analytics). If there are references to specific URLs in the body, these URLs are also checked for the presence of malicious code.
The evaluation uses DMARC, DKIM and SPF, which are technologies used to detect and block spoofed or phishing emails.
Solutions are available for on-premise (physical, virtual), but also for protecting cloud email services.