Skip to content

Account security check

Find and clean up, with one click, what a compromised account leaves behind: external forwarding, disabled local delivery, filter rules, a fake reply-to address or display name.

Global administratorAccount editing › Security Audit; Tools and Migration › Profelis Guard

Auditing a single account

  1. In Manage › Accounts, double-click the account.
  2. Click Security Audit in the left tree. The box at the top shows the number of critical indicators; under Findings each finding is listed with its current value and the Expected value.
  3. With Account controls you can block the account from sending out (Block outbound mail) and disable local delivery and user forwarding.

Account editing: Security Audit

Account editing: Security Audit

The same screen also opens under Tools and Migration › Profelis Guard › Account: enter the address in E-mail and press Open.

Cleaning up the traces

  1. Review the Findings list.
  2. Under Clean up, clean each item with Apply next to it. The old value is kept; Undo restores it if needed.
  3. Or clean all of them at once with Apply all 3 steps (the number depends on the findings).

Findings and Clean up

Findings and Clean up

If the attacker is still using the account, lock it first with Lock account at the top.

New password and signing out

  1. Under New password, create a strong password with Generate; keep Require a change at first sign-in ticked.
  2. Tick Sign out all devices.
  3. Press Apply password, then take the password with Copy and pass it to the user securely. The user is not notified automatically.

New password

New password

Bulk scan

  1. Click Tools and Migration › Profelis Guard. Bulk security scan opens; choose a Domain and press Scan.
  2. Accounts with forwarding, disabled local delivery, a Reply-To address or a filter script are listed with their risk level and findings. Tick the accounts to act on.
  3. Under Bulk actions for selected accounts, choose what to do: Lock account, Remove forwarding, Restore local delivery, Clear Reply-To, Clear filters.
  4. Press Apply to selected; after confirmation the actions run and the Result column fills in.

Profelis Guard: bulk security scan

Profelis Guard: bulk security scan

The Forwarding tab lists every account that has forwarding.

Post-incident checklist

Changing the password alone is not enough: also clean up forwarding, the Reply-To address and filter rules, and sign out all sessions.