Advisory: Sophos Endpoint - "Your connection isn't private." We're aware of a certificate issue and are actively working to resolve it. Please see: KB-000045954 for the latest updates.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Email Banner "Allow Sender"

Hello All,

Clarifications on the Email Banners: We have received an external email and we clicked on the "Allow Sender" We get new emails from the same sender and the banner to Allow Sender or Block is still showing. Is that how it's suppose to work?

I was assuming once you added the sender to the Allow sender any future emails won't have the banner anymore. What am i missing? TY



Edited tags
[edited by: Raphael Alganes at 12:05 AM (GMT -7) on 7 Jun 2023]
Parents
  • Hello  

    As per the Smart Banners FAQs the banner would still show when below conditions match.

    External, Yellow Smart Banner (including Allow/Block links)
     

    • The sender is in the Allow list and passed the DMARC check, but the Trusted banner is turned off.
    • The sender is not in the Allow list and passed the DMARC check.
    • There is no DMARC policy set.
    • The sender does not have all three DMARC, DKIM, and SPF records.

    I've also tested within my setup and can confirm that even after allowing the sender, if "Trusted" banner from policy is disabled. I got External Yellow banner with option "Block Sender"

    First email:

    2nd test email, After clicking on "Allow Sender"

    Enabled "Trusted" banner within Policy:

    3rd Test emaiil after enabling "Trusted" banner

    Hardik R 
    If a post solves your question use the 'Verify Answer' link.

Reply
  • Hello  

    As per the Smart Banners FAQs the banner would still show when below conditions match.

    External, Yellow Smart Banner (including Allow/Block links)
     

    • The sender is in the Allow list and passed the DMARC check, but the Trusted banner is turned off.
    • The sender is not in the Allow list and passed the DMARC check.
    • There is no DMARC policy set.
    • The sender does not have all three DMARC, DKIM, and SPF records.

    I've also tested within my setup and can confirm that even after allowing the sender, if "Trusted" banner from policy is disabled. I got External Yellow banner with option "Block Sender"

    First email:

    2nd test email, After clicking on "Allow Sender"

    Enabled "Trusted" banner within Policy:

    3rd Test emaiil after enabling "Trusted" banner

    Hardik R 
    If a post solves your question use the 'Verify Answer' link.

Children
No Data