How Email Traffic Control Works
Email Traffic Control in Shield allows administrators to create customizable, visible workflows using templates or custom rules to precisely manage inbound, outbound, and mailbox-level email by detecting sensitive data like PII or password reset emails and automatically applying protections such as blocking, quarantining, encrypting, or trusting senders without compromising security.
Forget every rule you've ever written.
Email Traffic Control gives admins point-and-click control over how inbound, outbound, and mailbox-level email is handled in Shield. Start with a template for common use cases or build your own workflow. Choose what Shield should identify, decide what happens next, and roll it out to one organization or your entire client base. Every workflow stays visible, so you can see what fired, what happened, and why.
Data Loss PreventionTrusted Sender ControlAccount Takeover Protection
Detect PII, PHI, or financial data in outbound email and trigger automatic protections like block, quarantine, or encrypt.
Automatically trust known senders, without creating dangerous allow lists or breaking zero trust.
Detect password reset emails and automatically lock them to cut off lateral movement from compromised inboxes.
WhenAny
Trigger a workflow if any or all conditions are met.
conditions are found
New
Stack multiple conditions to create powerful workflows that handle email with precision.
- Email Content
detects
Personal Identifiable Information (PII)
Edit existing conditions to keep up with unique customer requirements.
Delete condition
Take these actions in order (starting at the top)
New
Stack multiple actions to create powerful workflows that handle email with precision.
Drag handle to change order
- deliver emailviaBracket
Actions are editable, so you can quickly tweak and adjust how Shield handles your mail.
Delete action
WhenAny
Trigger a workflow if any or all conditions are met.
conditions are found
New
Stack multiple conditions to create powerful workflows that handle email with precision.
- Any Sender Addresscontains
Edit existing conditions to keep up with unique customer requirements.
Delete condition
- Any Sender Addresscontains
mailprotector.com
Edit existing conditions to keep up with unique customer requirements.
Delete condition
Take these actions in order (starting at the top)
New
Stack multiple actions to create powerful workflows that handle email with precision.
Drag handle to change order
- trust the senderdestination:inbox
Actions are editable, so you can quickly tweak and adjust how Shield handles your mail.
Delete action
WhenAny
Trigger a workflow if any or all conditions are met.
conditions are found
New
Stack multiple conditions to create powerful workflows that handle email with precision.
- Message Body
detects
Password Reset
Edit existing conditions to keep up with unique customer requirements.
Delete condition
Take these actions in order (starting at the top)
New
Stack multiple actions to create powerful workflows that handle email with precision.
Drag handle to change order
- lock with Lockbox
Actions are editable, so you can quickly tweak and adjust how Shield handles your mail.
Delete action
Frequently Asked Questions
How is ETC different from traditional email security rules?
In most systems, you build the detection logic yourself—matching fields to values, writing regular expressions, or in some cases learning an entirely new programming language. The process is cryptic, time-consuming, and still not accurate enough.
ETC works differently by analyzing the complete context of every message. Intelligent Data Detectors—bespoke programs trained to recognize entire categories of sensitive and risky messages—do the heavy lifting. Admins apply them through a point-and-click workflow builder that makes complex logic accessible without writing a single line of code. The result is more accurate detection, less manual work, and no regex required.
Is ETC included in Shield or is it an add-on?
At Mailprotector, we believe core security functionality shouldn't cost extra, so ETC is available to all Shield partners at no charge. If you want DLP functionality anywhere near the power of ETC elsewhere, you're going to have to upgrade to pricey licenses (like Microsoft E5).
Is workflow activity logged?
Yes. All workflow activity is logged in the Timeline tab of X-ray—which workflow triggered, what actions were executed, and delivery details. From the workflow itself, you can also see recent messages it triggered and jump directly to the X-ray for each one. It's always clear what's running, what it's catching, and whether it needs adjustment.
What is Bracket?
Bracket is Mailprotector's email encryption solution, and one of the actions ETC can trigger automatically. When a workflow detects sensitive content, it can route that message through Bracket for effortless data loss prevention. No apps, plugins, or passwords required on either end. Learn more about Bracket.
What is Lockbox?
Lockbox is Shield's sensitive message vault. When ETC detects something worth extra security—like a suspicious password reset email—it can trigger the message to be locked down automatically. Content is redacted and replaced with a placeholder only MFA can unlock. Learn more about Lockbox.
Want to see Shield in action?
Say when and we'll be in touch with next steps.