Go to content
  • Logout
  • Password Reset
  • beds.ac.uk
Bedfordshire Uni Logo
Outlook
itrent-badge.jpg
Document Search
Service-badge.jpg
Main
Logout Password Reset beds.ac.uk
Leadership Communication
Latest from the Vice Chancellor Senior Leadership Blog Strategic Plan - Transforming Bedfordshire Supporting our Communities Team Talk Vice Chancellor Awards Infastructure Project Proposal Form
Leadership Communication
Latest from the Vice Chancellor Senior Leadership Blog Strategic Plan - Transforming Bedfordshire Supporting our Communities Team Talk Vice Chancellor Awards Infastructure Project Proposal Form
Staff Information
Applications tracker Apprenticeships AUA- Association of Uni Administrators Staff Benefits Staff development calendar Staff Engagement Forum Support and Report UCU UNISON Wellbeing
Staff Information
Applications tracker Apprenticeships AUA- Association of Uni Administrators Staff Benefits Staff development calendar Staff Engagement Forum Support and Report UCU UNISON Wellbeing
Projects and events
Annual Staff Conference Bid for Beds MyBedsLife Student Portal MyEngagement National Student Survey Target Zero Semesterisation
Projects and events
Annual Staff Conference Bid for Beds MyBedsLife Student Portal MyEngagement National Student Survey Target Zero Semesterisation
Governance
Adjudication Board of Governors General Data Protection Regulation Health & Safety Legal Office Records Management UCIF Course Information Form UCIF Viewer
Governance
Adjudication Board of Governors General Data Protection Regulation Health & Safety Legal Office Records Management UCIF Course Information Form UCIF Viewer
Professional Services A- C
Academy for Learning and Teaching Excellence Access Partnership Programme Accommodation Alumni Brand Resource Hub Careers and Employability Service Catering Communications Community and Faith - Chaplaincy Culture and Community Engagement
Professional Services A- C
Academy for Learning and Teaching Excellence Access Partnership Programme Accommodation Alumni Brand Resource Hub Careers and Employability Service Catering Communications Community and Faith - Chaplaincy Culture and Community Engagement
E-I
Environmental Sustainability Estates and Facilities Equality and Diversity Finance Governance and Planning Health and Safety Image Library Information and Communication Technology (ICT)
E-I
Environmental Sustainability Estates and Facilities Equality and Diversity Finance Governance and Planning Health and Safety Image Library Information and Communication Technology (ICT)
I-P
International Office Library, Learning Resources and Information Office of the Vice Chancellor People and Culture People and Culture: Staff Development and Training People and Culture Systems: User guides and FAQs Print and Copy Putteridge Bury Conference Centre
I-P
International Office Library, Learning Resources and Information Office of the Vice Chancellor People and Culture People and Culture: Staff Development and Training People and Culture Systems: User guides and FAQs Print and Copy Putteridge Bury Conference Centre
Q-W
Quality Recruitment, Outreach, Admissions and Marketing (ROAM) Registry Research and Innovation Sport and Recreation Student Experience Student Support Web editing: Umbraco
Q-W
Quality Recruitment, Outreach, Admissions and Marketing (ROAM) Registry Research and Innovation Sport and Recreation Student Experience Student Support Web editing: Umbraco
  • ICT
  • ICT Services
  • AV and Media Services
  • Cyber Security
    • Email Security
    • Password guidance
    • Safer web browsing
    • Protect your device and email
    • Cyber Essentials
    • Bring Your Own Device (BYOD)
  • Generative AI Guidance
  • ICT Policies
  • Digital Strategy

Email Security

The University of Bedfordshire uses KnowBe4 (formerly Egress) to help protect incoming and outgoing emails. The platform works in the background to identify potentially harmful emails and help prevent sensitive information from being sent to the wrong recipients.

KnowBe4 provides two key tools:

  • KnowBe4 Defend identifies potential threats in incoming emails.
  • KnowBe4 Prevent helps identify potential mistakes before outgoing emails are sent, using the KnowBe4 Email Security add-in in Microsoft Outlook.

On mobile devices where the Outlook add-in is unavailable, KnowBe4 Prevent uses a different process to notify you of potential risks.

For more information about both tools, including how KnowBe4 Prevent works on mobile devices, see How KnowBe4 protects your emails below.

Demos and video guides

Explore the interactive demonstration and short videos below to see how KnowBe4 Defend and Prevent work.

Interactive inbox demonstration

Explore an interactive demonstration showing how KnowBe4 Defend highlights suspicious emails and potential phishing indicators.

Try the interactive inbox demonstration

KnowBe4 Defend demo

Watch this video to learn what the different incoming email warnings mean, how KnowBe4 Defend protects you when you click a link, and how to report suspicious emails.

Thumbnail for KnowBe4 Defend video demo

KnowBe4 Prevent demo

Watch this video to learn how KnowBe4 Prevent identifies potential risks in outgoing emails and helps prevent messages from being sent to the wrong recipients.

Thumbnail for KnowBe4 Prevent video demo

Having trouble viewing the videos? You may need to allow third-party cookies for SharePoint and Microsoft Stream in your browser settings.

How KnowBe4 protects your emails

Expand the sections below to learn how KnowBe4 protects incoming and outgoing emails, including how KnowBe4 Prevent works on mobile devices.

KnowBe4 Defend scans incoming emails to identify potentially suspicious or malicious content. Coloured warning banners may appear at the top of emails to highlight potential threats, including phishing attempts, impersonation and spam.

These banners help you assess an email before clicking links, opening attachments or replying.

Examples of incoming email banners

Banners you might see on incoming emails
What it means

Productivity banners are grey and are applied to emails that Defend classifies as graymail or spam.

Grey email banner labelled 'Graymail' indicating a low-priority or bulk email.

Non-malicious bulk emails such as newsletters, announcements, or advertisements

Benign banners are blue and are informative alerts that are not associated with detected threats. These banners increase awareness and help you make informed decisions about handling an email. While no immediate action is usually necessary, the information provided can be valuable for assessing the email's relevance and importance.

Blue informational email banner labelled 'External email' warning that the message originated outside the University.

The email originates from outside your organization. Care should be taken in case the email is impersonating a University of Bedfordshire employee

Blue informational email banner labelled 'First time sender' indicating the sender has not emailed before.

Email from someone who has never emailed you before.

Care should be taken that this is a legitimate email and not an impersonation attempt.

Blue informational email banner labelled 'Discusses sensitive information' warning that the email may contain sensitive content.

Email includes content that may be considered sensitive.

Consider carefully before forwarding email to colleagues or students.

Blue informational email banner labelled 'Contains topics of a financial nature' warning that the email references financial information.

Email contains financial information or references

E.g. care should be taken if the sender is asking for a change of payment details.

Suspicious banners are amber and are applied to emails that contain suspicious elements, potentially indicating phishing or impersonation attempts.

  1. Exercise caution before taking any action on the email.
  2. Carefully inspect the sender's email address to verify its authenticity.
  3. Be wary of clicking on any links within the email.
  4. Avoid downloading or opening attachments unless you are certain of their safety.
  5. If you need to reply, double-check that you're sending to the legitimate sender, not a similar-looking fraudulent address.
  6. When in doubt, verify the email's legitimacy through an alternative communication channel, such as a phone call or in-person confirmation.
  7. Report the email immediately by using the Report button.

Amber warning email banner labelled 'This email shows signs of phishing' indicating potential phishing activity.

An attacker may be trying to get your account information via a link or an attachment

Amber warning email banner labelled 'This email shows signs of impersonation' indicating a possible impersonation attempt.

A user may pretend to be a member of University of Bedfordshire staff, but the email may be different

Dangerous banners are red and are applied to emails exhibiting strong indicators of phishing or other malicious intent.

  1. Do not click on any links or download any attachments within the email.
  2. Refrain from replying to the email or engaging with the sender.
  3. Do not forward the email to others, as this may spread the potential threat.
  4. Report the email immediately by using the Report button.
  5. Delete the email from your inbox after reporting it unless instructed otherwise by your IT team.

Red warning email banner labelled 'This email shows strong signs of phishing' indicating a potentially malicious email.

An attacker may be trying to get your account information via a link or an attachment or other methods

 

KnowBe4 Prevent works with Microsoft Outlook to help prevent emails and sensitive information from being sent to the wrong recipients.

The system checks outgoing emails for potential risks, such as incorrect email addresses, unexpected recipients or sensitive attachments. If a potential issue is detected, a warning prompt, known as a nudge, asks you to review the email before sending it.

Examples of outgoing email warnings

Nudges you might see when sending emails
What it means

Email security warning about an unusual recipient being included in an email conversation.

Sent to recipients not normally included in similar communications. Check all the email addresses should be included.

Email security warning indicating a recipient address may be misspelled or different from the usual contact.

Recipient address appears to be a misspelled version of a known contact. Check spelling before sending.

Email security warning indicating the named person in the email does not match the recipient address.

Email greeting does not match the recipient’s address. Check you have selected you have selected the correct email address and it matches the name at the top of the email.

Email security warning advising that a large number of recipients have been added to the To or CC fields.

Large number of recipients included in To or CC fields. Check that all the people in the list should see the information.

Email security warning about sending sensitive information to a personal email address.

Email sent to a personal or webmail address. Check this address is correct before sending.

Email security warning indicating the sender is emailing an external recipient for the first time.

Email sent to a new external recipient. Double-check you have the correct spelling, as it is a new email address.

Email security warning indicating the email is being sent to multiple external domains.

Email sent to multiple external domains. Check that all the people in the list should see the information.

Email security warning indicating the recipient address differs from the contact normally used and may indicate impersonation or phishing.

Reply sent to an address impersonating a known contact. This may be a phishing attempt. Double-check the email address is correct before sending.

Email security warning indicating the recipient domain was recently created and may be suspicious.

Email sent to a recently registered domain. New domains often impersonate legitimate domains and a real well-known company would likely have been running their domain for a much longer period.

Email security warning stating that emails cannot be sent to a blocked or unsafe domain.

Email sent to a domain with a malicious reputation. Please contact the ICT Service Desk for advice.

 

On mobile devices where the KnowBe4 Email Security Outlook add-in is not available, KnowBe4 Prevent will alert you to potential risks by email.

After sending an email from your mobile device, look out for a message from Egress Moderator if a potential issue has been detected.

The message will summarise the potential risk and give you two options:

  1. Send Anyway – If you have reviewed the warning and are happy that the email and its contents are correct, select this option to allow the email to be sent.

  2. Don't Send – Select this option to cancel the email and prevent it from being sent.

If you do neither of these, the email will automatically send after two hours.

If you need to correct something before sending the email, go to your Sent Items, find the original message and select Reply All. Make the necessary corrections before sending the email again, including remove the "Re:" on the subject line.

Always read the warning carefully before choosing an option. If you are unsure whether it is safe to send the email, choose Don't Send.

The example below shows what a KnowBe4 Prevent notification looks like on a mobile device.

Screenshot of Egress Moderator email in on a phone

Frequently asked questions (FAQs)

Find answers to common questions about KnowBe4, including incoming email warnings, outgoing email checks and how to get help.

KnowBe4 (formerly Egress) is the University's email security platform. It provides two tools:

  • KnowBe4 Defend helps protect your inbox from potentially malicious incoming emails.
  • KnowBe4 Prevent helps prevent emails and sensitive information from being sent to the wrong recipients.

KnowBe4 Defend adds coloured warning banners to incoming emails to highlight potentially suspicious content, such as phishing attempts, impersonation, spam or sensitive information.

These banners help you assess an email before clicking links, opening attachments or replying.

KnowBe4 Defend uses four banner colours:

  • Grey (Productivity): Non-malicious bulk emails, such as newsletters, announcements or spam.
  • Blue (Benign): Informational alerts, including external senders, first-time senders or emails containing financial or sensitive information.
  • Amber (Suspicious): Potential phishing or impersonation attempts. Exercise caution and verify the sender before interacting with the email.
  • Red (Dangerous): Strong indicators of phishing or malicious content. Do not click links, open attachments, reply or forward the email.

For further details and examples, expand the Incoming email security (KnowBe4 Defend) section above and see Examples of incoming email banners.

If you receive an email with an amber or red warning banner:

  • Amber: Avoid clicking links or opening attachments. If you're unsure whether the email is legitimate, verify the sender using another communication method, such as a phone call.
  • Red: Do not click links, open attachments, reply or forward the email.

For both warning types, use the Report button to report the email immediately. Once reported, delete it from your inbox unless instructed otherwise by the ICT team.

KnowBe4 Prevent checks outgoing emails for potential risks, including incorrect recipients, unusual sending patterns and sensitive information.

If a potential issue is detected, you'll receive a warning prompt, known as a nudge, asking you to review the email before sending it.

KnowBe4 Prevent may display a warning if:

  • Your email includes a large number of recipients or people who aren't normally included in similar communications.
  • A recipient's email address appears to contain a spelling mistake.
  • The name in your email greeting doesn't match the recipient's email address.
  • You're sending an email to a personal email address or a new external recipient.
  • You're replying to an address that may be impersonating a known contact.
  • A recipient's email domain was recently registered or has a potentially malicious reputation.

Review the warning carefully and check the relevant details before proceeding.

For further details and examples, expand the Outgoing email security (KnowBe4 Prevent) section above and see Examples of outgoing email warnings.

KnowBe4 Prevent checks outgoing emails for potential risks before they're sent. These checks should normally take only a few seconds.

Keep the email open while it's being checked. If your email becomes stuck or doesn't send, contact the ICT Service Desk.

See the Need help? section below for contact details.

If you experience technical issues with KnowBe4 Defend or Prevent, or receive a severe security warning, contact the ICT Service Desk during office hours.

See the Need help? section below for contact details.

Need help?

If you need help with KnowBe4 Defend or Prevent, please contact the ICT Service Desk (office hours only) on 01582 743366 or log a ticket at uobservicedesk.beds.ac.uk

Copyright © 2026 University of Bedfordshire
Bedfordshire University Logo
ICT » Cyber Security » Email Security
Top

Key areas

Agresso
Room bookings
SITS/E-Vision
Finance
Academy for Learning & Teaching Excellence
People and Culture
Jobs
Staff development and training
Staff wellbeing and support
Personal Development Review
IT services
Wi-Fi on campus
Alumni

Websites

BREO
Careers Service
Library
www.beds.ac.uk
timetable.beds.ac.uk
myengagement.beds.ac.uk
Sustainability
Online Course & Unit Information Form (UCIF)
Online Course & Unit Information Form (UCIF) Viewer
Online Visiting Staff Timesheets
Pure and the Research Portal
Research & Innovation

Resources

MyBedsLife Student Portal
Research Portal
Student Reports
University Calendar Dates
Image Library
iTrent People Manager
iTrent Self Service
SiD Online
Admissions reports
Academic Workload Planning
Copyright © 2026 University of Bedfordshire