Why Zscaler + Mimecast

Security teams often manage email security, web security, and SaaS security controls in separate workflows—creating blind spots which attackers can exploit and forcing analysts to correlate signals after the fact. Together, Zscaler and Mimecast connect email threat intelligence to access enforcement across web and cloud apps, so organizations can block or isolate risky destinations, reduce repeat exposure, and respond more consistently across channels.

Overview and Benefits

Coordinated protection across email, web, SaaS

Email threats don’t end in the inbox—they continue when users click links, authenticate, and interact with cloud apps. Zscaler and Mimecast partner to share email-derived threat intelligence and enforce protection policies, so security teams can contain threats faster, reduce blind spots, and operate with less complexity.

attack-surface
Minimize the attack surface across channels

Share email-derived threat intelligence to help stop malicious links and destinations when users click from email into the browser or cloud apps.

reduce-risk
Reduce risk from data exposure

Align protection intent across email and web/SaaS to reduce channel gaps and apply consistent controls for sensitive data.
 

security-operations
Improve security operations efficiency

Enrich detections with identity and destination context and drive consistent containment actions across tools and teams.

Details

Together, Zscaler and Mimecast help solve:

detection-without-enterprise-wide-enforcement

01

Detection without enterprise-wide enforcement

Email security may detect phishing, but web/SaaS controls often don’t automatically receive the same indicators—so users can still click through to malicious destinations before enforcement catches up.

inconsistent-data-protection-across-channels

02

Inconsistent data protection across channels

Data protection policies are frequently applied differently across email, browsers, and cloud apps, creating inconsistent controls and gaps where sensitive data can be shared or uploaded through the “least protected” channel.

siloed-signals-slowing-investigations-and-containment

03

Siloed signals slowing investigations and containment

SecOps teams investigate email, web, and SaaS activity in separate consoles and timelines, slowing triage and making it difficult to reconstruct the full attack chain, scope impact, and apply consistent containment actions.

Our Platform

Zscaler & Mimecast

Outbound Email DLP and Secure Gateway

zscaler-and-mimecast-diagram
ENLARGE
01
Send

A user sends an outbound email from Gmail or Microsoft 365

02
Route

The email is routed to the Zscaler Smart Host for security inspections

03
Inspect

Zscaler DLP scans the email for sensitive data and policy violations

04
Return

The inspected email is returned to the email environment with appropriate policy enforcement

05
Forward

The email is forwarded to Mimecast Next Hop Secure Email Gateway

06
Enforce

Mimecast enforces the DLP policy by blocking, allowing, or applying secure email delivery through Mimecast

07
Delivery

Email is securely delivered to the recipient if allowed

01 / 05

Zscaler & Mimecast: 
URL Threat Sharing
Share

Mimecast shares threat intelligence and malicious URL indicators to Zscaler via Threat Sharing API

Protect

Zscaler uses this intelligence to detect and block malicious URLs for all users and locations

zscaler-and-mimecast-url-threat-sharing-medium
ENLARGE
01
Send

A user sends an outbound email from Gmail or Microsoft 365

02
Route

The email is routed to the Zscaler Smart Host for security inspections

03
Inspect

Zscaler DLP scans the email for sensitive data and policy violations

04
Return

The inspected email is returned to the email environment with appropriate policy enforcement

05
Forward

The email is forwarded to Mimecast Next Hop Secure Email Gateway

06
Enforce

Mimecast enforces the DLP policy by blocking, allowing, or applying secure email delivery through Mimecast

07
Delivery

Email is securely delivered to the recipient if allowed

01 / 05

Benefits

Better together

The Zscaler-Mimecast alliance delivers:

faster-investigation
Faster investigation and response using correlated email, web, and SaaS context
accurate-impact
Accurate impact scoping with fewer duplicate alerts
consistent-containment
Consistent containment across teams, channels, and tools

Request a demo

Understand your threat exposure and how the Zscaler Zero Trust Exchange platform can securely and quickly transform the way you do business.