Email Filtering

• The original email failed to be delivered (bounced/expired)
• The original email was deleted by the user

"Virus" means any binary or executable code whose purpose is to gather information from the infected host (such as Trojans), change or destroy data on the infected host, use inordinate system resources in the form of memory, disk space, network bandwidth or CPU cycles on the infected host, use the infected host to replicate itself to other hosts, or provide control or access to any of the infected host's system resources.

This SLA does not apply to (i) text messages that use fraudulent claims to deceive the Customer and/or prompt the Customer to action (such as phishing); (ii) a binary or executable code installed or run by an end user that gathers information for sales and marketing purposes (such as spyware); (iii) a virus that has been detected and has been cleaned by other virus scanning products; (iv) an ineffective or inactive virus contained in a bounced email; (v) a Virus-infected email that is quarantined by the Hosted Services but is subsequently delivered to an end user or administrator by such end user or administrator; (vi) emails containing attachments that are password protected, encrypted or otherwise under an end user's control; or (vii) any action by a Customer end user or administrator that results in deliberate self-infection.

Customer will not be eligible to receive a remedy under this SLA if Customer (i) is not subscribing to all anti-virus Security Services Hosted Service modules for all Customer Mailboxes for which a Security Services Hosted Service subscription has been purchased; (ii) has not enabled full virus protection for all Customer Mailboxes for which a Security Services Hosted Service subscription has been purchased; and (iii) does not provide LuxSci with conclusive written evidence that the Virus was caused by an email that passed through the Security Services Hosted Service network.

Remedy. If a validated Infection occurs in any calendar month, and if Customer has fulfilled all of its obligations under the Agreement and this SLA, LuxSci will provide Customer with a Service Credit for the month in which the failure to meet this SLA has occurred. The Service Credit will be calculated in accordance with the table below.

• 1 to 3 Validated Occurrences — 25% Credit
• 4 to 5 Validated Occurrences — 50% Credit
• 6+ Validated Occurrences — 100% Credit

Credit is only with respect to fees paid for Premium Email Filtering services.

Zero-Hour Threat Detection protects enterprises against new email security threats, such as phishing attacks and viruses as they emerge. This adds an additional layer of security threat assessment and detection over the Spam Detection, Phishing Protection, and Virus Protection layers, providing critical defense-in-depth protection.

• Defense-in-Depth: Zero-Hour Threat Detection provides an additional layer of security threat detection by assessing and identifying emerging email security threats that cannot be positively confirmed by the Spam Detection, Phishing Protection, and signature-based Virus Protection layers.

  Protection against Emerging Threats: Zero-Hour Threat Detection assesses and identifies suspicious emails and takes preventative action, keeping systems safe. By temporarily delaying email messages, more information can be gathered to make an assessment for a positive confirmation regarding the threat and then taking the appropriate action (e.g., repairing virus infected messages, moving phishing messages to the Phishing Quarantine, or moving spam messages to a Spam Quarantine)

Leverage an agentless, cloud-based service with URL intelligence to protect users from malicious links in emails no matter when or where they click on that URL-while working remotely, BYOD, and more. A frequent tactic has been to send users socially engineered emails that are designed to entice the user to click a URL within the email. The URL web destination either automatically initiates a download, or tricks the user to enter sensitive or private information. Proofpoint research has shown that 20% of clicks by users on malicious emails occur off the corporate network, bypassing on-premise security controls.

Our URL Defense Service rewrites the URL, so that wherever the user checks their email, Proofpoint can:

Protect: Protect your enterprise by testing every URL behind the scenes at click time--wherever and whenever it's clicked--to ensure that the organization is always protected, whether the user is accessing email on the corporate VPN or on an unsecured public connection
• Expose: Provide discrete visibility and click-tracking by ensuring URLs are unique for each recipient and each message, enabling end-to-end insight
• Complement: Respects your existing layers of security by not acting as a proxy service, but rather using a 302 redirect to reroute the user's browser to safe destinations upon confirmation by Targeted Attack Protection. This proxy-less approach ensures existing corporate security controls and acceptable use policies are not bypassed.