Views:
Specify legitimate sender domains that might be frequently forged into cousin domains for spam, phishing, and BEC attacks. Cloud Email Gateway Protection will detect email messages from cousin domains of the specified high profile domains.

Procedure

  1. Go to Inbound ProtectionSpam FilteringHigh Profile Domains.
  2. In the High Profile Domain Settings section, enable high profile domains, select a detection threshold, and click Save.
    • Aggressive: This option provides the most number of detections based on fuzzy matches. This is the most rigorous level of spam, phishing, and BEC detection.
    • Normal: This is the default and recommended setting. This option provides a moderate number of detections.
    • Conservative: This option provides the most accurate detections based on near-exact matches.
  3. In the High Profile Domains section, maintain a list of legitimate sender domains.
    • Click Add to add a high profile domain. Specify the domain name, for example, domain.com for the high profile domain.
      Wildcard characters and regular expressions are not supported.
      Note
      Note
      You can add a maximum of 100 high profile domains.
    • Click Delete to delete a high profile domain.
    • Click Import to import high profile domains from a TXT file.
      The following import options are available:
      • Merge: append the high profile domains to the existing list.
      • Overwrite: replace the existing high profile domain list with the domains in the file.
    • Click Export to export the high profile domain list to a TXT file.
  4. In the Exception List section, maintain a list of domains that Cloud Email Gateway Protection excludes from scanning for cousin domains.
    Note
    Note
    You can add a maximum of 1,000 domains to the exception list.