Views:
Specify legitimate sender domains that might be frequently forged into cousin domains for spam, phishing, and BEC attacks. TrendAI™ Email Security will detect email messages from cousin domains of the specified high profile domains.

Procedure

  1. Go to Inbound Protection → Spam Filtering → High Profile Domains.
  2. In the High Profile Domain Settings section, enable high profile domains, select a detection threshold, and click Save.
    • Aggressive: This option provides the most number of detections based on fuzzy matches. This is the most rigorous level of spam, phishing, and BEC detection.
    • Normal: This is the default and recommended setting. This option provides a moderate number of detections.
    • Conservative: This option provides the most accurate detections based on near-exact matches.
  3. In the High Profile Domains section, maintain a list of legitimate sender domains.
    • Click Add to add a high profile domain. Specify the domain name, for example, domain.com for the high profile domain.
      Wildcard characters and regular expressions are not supported.
      Note
      Note
      You can add a maximum of 1000 high profile domains.
    • Click Delete to delete a high profile domain.
    • Click Import to import high profile domains from a TXT file.
      The following import options are available:
      • Merge: append the high profile domains to the existing list.
      • Overwrite: replace the existing high profile domain list with the domains in the file.
    • Click Export to export the high profile domain list to a TXT file.
  4. In the Exception List section, maintain a list of domains that TrendAI™ Email Security excludes from scanning for cousin domains.
    Note
    Note
    You can add a maximum of 1,000 domains to the exception list.