CloudFilter: Platform-Agnostic Email Filtering by Mailprotector

Question 1

What platforms does CloudFilter support?

Accepted Answer

CloudFilter protects any platform where you have MX record control—Microsoft 365, Google Workspace, on-prem servers, hosted environments, and POP/IMAP. That flexibility makes it the right fit for MSPs managing diverse client environments.

Question 2

How does CloudFilter evaluate and filter email?

Accepted Answer

Every message is scored by multiple detection tools, each contributing a weighted score toward an overall threat assessment. The default quarantine threshold is 200 points. Messages that cross it are held outside the mailbox for review. Sensitivity is fully tunable at any level, from your entire client base down to individual users, so filtering behavior matches each client’s needs without rebuilding policy from scratch for every domain.

Question 3

What if a legitimate email gets quarantined?

Accepted Answer

CloudFilter’s probabilistic detection is designed to minimize false positives, but when one does occur, the process is straightforward. Users can safely preview any held message before deciding what to do, and if admin permissions allow, deliver or block with one click.

For admins, every quarantined message includes a full breakdown: reasons held, sending source data, and geographic origin. And if a pattern emerges, filtering sensitivity is fully tunable at every level so the fix is a configuration change, not a recurring task.

Question 4

How does CloudFilter stop advanced threats?

Accepted Answer

CloudFilter combines open source and proprietary technology—machine learning, heuristic analysis, URL and domain reputation checks, multiple anti-virus and malware engines, and more—into a sophisticated detection system that identifies nuance other filters miss. Every message is evaluated across multiple layers simultaneously, generating a probabilistic threat score that accounts for signals other tools treat in isolation.

Automated impersonation detection combines organizational insights and behavioral analysis to identify impersonation attempts in real time. A confidence level and risk score are assigned to every flagged message, with controls for administrators to tune sensitivity down to the individual user. To help prevent phishing and spoofing attempts, CloudFilter provides complete DMARC enforcement with the ability to customize behavior.

Question 5

How long does setup take?

Accepted Answer

For most partners, CloudFilter is up and running in 5–15 minutes with no email outage during the transition. Setup follows four steps: add users, set the inbound mail destination, verify the domain via TXT record, and update MX records. The recommended approach is to add Mailprotector’s MX records before removing the existing ones. This starts DNS propagation in the correct order and ensures no email is lost in the transition.

Question 6

How does user management work across multiple client environments?

Accepted Answer

User Sync is CloudFilter’s automated user management feature. It connects to Microsoft 365, Google Workspace, or any LDAP/Active Directory source to pull users over automatically. And because it inherits account classifications from the source, distribution lists, shared mailboxes, and equipment accounts are excluded from billing automatically. User Sync also feeds CloudFilter’s impersonation detection layer with organizational data, which is what makes automated impersonation detection possible.

Question 7

What partner training is available?

Accepted Answer

One-on-one new partner training sessions are available on request at no additional cost. A recorded training video is also available in the help center for self-paced onboarding. Partners receive free NFR licenses to deploy and test CloudFilter themselves before rolling it out to clients.

Question 8

What does SafeSend add to outbound protection?

Accepted Answer

CloudFilter includes core outbound filtering, and SafeSend is bundled with it to add advanced content controls and compliance tools on top.

SafeSend gives administrators visibility into the outbound quarantine and the ability to define what content is permitted to leave using pre-built lexicons or custom rules. When a rule is triggered, senders are notified immediately and can self-release the message with one click if permissions allow. For organizations with more stringent requirements, SafeSend can automatically trigger Bracket® encryption on sensitive outbound content, so data is protected in transit rather than simply stopped.

Question 9

Is CloudFilter Mailprotector's only email filtering product?

Accepted Answer

No. CloudFilter is Mailprotector’s platform-agnostic gateway solution for MSPs managing a diverse mix of client environments. For MSPs who primarily support organizations on Microsoft 365, Mailprotector also offers Shield™, a zero trust email security solution that combines our secure email gateway with a patented API integration for full edge-to-inbox visibility and control.

CloudFilter: Platform-Agnostic Email Filtering by Mailprotector

One solution. Every environment.

The flexibility to protect any environment, your way.

Every message evaluated from every angle

Stop spam without blocking legitimate email

Deep admin control that doesn't take an expert to run

Safe message review without the back and forth

Take control of what leaves your clients' environments

DLP rule templates

Instant blocking notifications

Attachment Blocking

Everything you need. Nothing you don't.

Platform Agnostic

Best-in-Class Console

Full Audit Trail

Impersonation Detection

DMARC Enforcement

Outbound, Built In

Complete your stack with more from Mailprotector®

Easy to run. Hard to beat.

Frequently Asked Questions