Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

Country of Origin (Geo IP protection)

What’s new – May 14, 2024

Your email security is quintessential to Sophos Email and the product team is constantly listening to your feedback to improve your email security posture. One of the features frequently requested is the support Geo IP protection. With the release of this new feature, Country of Origin, we have again responded to your valuable feedback. We believe that this feature in combination with the anti-spam protection will further fortify your defenses against both the spam and the nuisance of unwanted messages that hamper productivity of your users.

Watch the video at end of this post to familiarize yourself with the new feature.  

Applies to the following Sophos products
Sophos Email Advanced

In this post the following sections are covered:
How to configure
View details in the Message History
Caveat
Watch the video


 

How to configure

To configure the country of origin protection, you need to use your email security policy. As shown in the screenshot below, under inbound settings you’ll find the country of origin tab on the left panel. You should select the countries from which you want to disallow the messages. We recommend checking the country for every message hop to prevent spammers from crafting a message that pretends to have originated in a country not disallowed by you.



View details in the Message History

As shown in the screenshot below, the Message Details page in Message History shows you the country of origin of the message that arrived from one of the countries disallowed by you in your Email Security policy.

 

Caveat

We recommend that you do not disallow the USA as the country of origin of messages. Many senders who are not located in the USA, register their IP addresses in the USA. Hence, disallowing messages from the USA will result in a significant increase in false positive detections, in which a message sent from another country is incorrectly detected as a message sent from the USA.



Watch the video