Configuring Email Connector Email Connector protects you from email borne threats by analyzing email attachments through Advanced Threat Defense. Note: Email Connector is not installed with Advanced Threat Defense. For more information on installing Email Connector, see McAfee Advanced Threat Defense Installation Guide. If you have configured a cluster, ensure that you install Email connector in your primary as well as the backup nodes. Ensure that you have reset your cliadmin password. If you continue using the default password, the configurations might fail. Advanced Threat Defense receives emails from a secure email gateway, performs an analysis on the email attachments, adds a verdict in the email header and sends it back to the email server. You need to configure your email gateway to send emails to the Advanced Threat Defense for analysis. You can add filters such as send the ones with attachment only and so on. We recommend you configure your SEG to send emails for analysis to Advanced Threat Defense only when your SEG's AV analysis have returned an inconclusive result. Troubleshooting email connector You can view the analysis report from Analysis → Email Reports on your Advanced Threat Defense web interface. You can also view the conversation log for each email report when you click under the Log column. Note: While you view the reports, the maximum number of reports you can navigate to are one million. If you want to view the reports beyond one million, use the search filter to reduce the result of the number of reports. Enable and configure Email ConnectorEnable Email Connector and configure options for the Secure Email Gateway (SEG) from where the emails are received, file analysis settings, and destination SEG or relay hosts to which the emails with analysis headers are forwarded. Configuring your Secure Email Gateway for Email Connector For optimal performance, it is important that you configure your Secure Email Gateway. Configure Email Connector filtering rulesCreate rules to exclude email attachments from analysis. Understanding Email Headers with analysis statusAfter analyzing the email attachment for threats, Advanced Threat Defense updates adds these headers of the respective emails with the observations, and sends the emails to the configured transporting email server or relay host.