This guide walks you through switching from Guardz in-house email protection to Check Point Email Protection (formerly Avanan).
Please note:
Once switched, you cannot go back to the Guardz email protection
The migration needs to be performed for each customer individually
Activation supports only Google Chrome and Microsoft Edge.
If activation fails or redirects to the Avanan login page, confirm using one of these browsers. Other browsers (like Firefox, Safari, or Brave) may block session cookies and cause the activation to fail.For Google Workspace environments, ensure that you have one additional free user license available during activation to create a Service User, prior to initiating the activation process. This license cannot be shared with existing users and incurs the standard per-user cost. If the required license is missing, an error will appear as follows:
Step 1: Open Email Protection Settings
Log in to Guardz platform
Navigate to ‘Security Controls’ and open the ‘Email Protection’ section
Locate the new option for Check Point Email Protection
Step 2: Activate the Service
Click on the ‘Request BETA Access’ button
After the button is clicked, it is grayed out, and hovering over it displays a notification indicating the progress
The button is re-enabled after roughly two hours, and the admin receives a notification confirming that the process can continue
Click on the 'Switch to Check Point' button
A confirmation screen will explain that switching is permanent
Click ‘Enable Check Point’ to proceed
This process may take up to a couple of minutes (the screen must remain open)
If the login screen doesn’t appear during CheckPoint Email Protection activation, the browser is likely blocking pop-ups. Allow pop-ups for the Guardz platform or try another browser to complete the activation successfully
Please note that the activation process may fail the first time due to technical reasons. Try clicking 'Retry' and starting the process again
Step 3: Authorize Your Email Provider
You will be redirected to a secure OAuth login page
Grant the required permissions to integrate with your email system
Step 4: Automatic Tenant Creation
Once authorized, Guardz will:
Create a new tenant in Check Point aligned with your Guardz account structure
Assign the correct license: ‘Advanced Protect’ plan (Email Only)
Users: corresponds to the existing setup in Guardz, ensuring all users are migrated accordingly.
All active Guardz users and shared mailboxes are automatically synced into the new tenant
New users will be added, and deactivated/suspended users will be removed automatically
Step 5: Wait for Activation
The Email Protection status will display as:
Pending → Learning → ActiveDuring 'Learning Mode', the system calibrates its Anti-Phishing engine by analyzing up to 13 months of email metadata to understand communication patterns and detect upstream MTAs. Additional information can be found here
Once the status shows 'Active' (this process may take up to 48 hours), your organization is fully protected by Check Point Email Protection
Please note: Guardz email protection remains fully functional until the Check Point protection service becomes active
Step 6: Review your Onboarded Customers
Select the ‘All Customers’ View
Navigate to ‘Security Controls’ tab and open the ‘Email Protection’ section
Review the status and type of each activated service for every customer
Step 7: Remove the Email Protection App
Once Check Point Email Protection is fully set up, the Guardz Email Protection app must be removed.
For Google:
Go to your Google Admin space > Apps > Google Workspace Marketplace apps > Apps list
Remove the ‘Guardz Email Security’ application
For Microsoft:
Go to your Microsoft Azure account: Azure portal > Enterprise applications > All Applications
Remove the ‘Guardz Email Security’ application
What’s Next?
Proceed to ‘Check Point Email Protection: Management, Configuring & Policies Handling’ article to handle the service settings.