Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Subscribers 17 subscribers
  • Views 1741 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How does VIP impersonation actually work? Can you add custom names?

TG1

We've been having a...challenging interaction with a Sophos support staffer who says that the VIP impersonation feature does not check display names, only email addresses.  This doesn't make sense, so I'm hoping the community can confirm this is not true.  Additionally, assuming VIP impersonation checks display names (as all other impersonation products I've used do), is there a way to add custom names for comparison?

As an example, we have several 'Jennifer' staff and receive phishing attempts with the same display name shortened to 'Jen', and I'd like to manually add common nicknames as VIP impersonation criteria.

Thanks!



This thread was automatically locked due to age.
Parents
  • +1

    Hi  

    The VIP impersonation does check the display names. If you can please share the case id, I would go back and fix my support string wherever it's loose.

    The detection is based on VIP name match in conjunction with an array of machine-learning algorithms and anti-phishing heuristics, including variations of the names. At present, you do not get the option to add custom names. Our engine already considers common variations of the names to adjust the score. However, our algorithm may not have the complete list of variations in names, and it learns new ones as we receive feedback from customers and partners.

    Hope this helps.

Reply
  • +1

    Hi  

    The VIP impersonation does check the display names. If you can please share the case id, I would go back and fix my support string wherever it's loose.

    The detection is based on VIP name match in conjunction with an array of machine-learning algorithms and anti-phishing heuristics, including variations of the names. At present, you do not get the option to add custom names. Our engine already considers common variations of the names to adjust the score. However, our algorithm may not have the complete list of variations in names, and it learns new ones as we receive feedback from customers and partners.

    Hope this helps.

Children
No Data
Unfiltered HTML