Deployment models
While there are multiple deployment methods, the easiest way to get started with Email Security is via the API deployment method.
When you choose the API deployment, Email Security can both scan and take actions on emails after they have reached a user's inbox.
With a Journaling setup alone without API integration, Email Security can only scan emails after it has reached a user's inbox.