Forum Discussion

JG-Burke's avatar
JG-Burke
Brass Contributor
Apr 13, 2023

Attack Simulation Training - external tag

I am testing the Attack Simulation Training. I noticed on the phishing email I received, that the "External" tag that Outlook assigns was missing. That would be a red flag for many people. Is there a way to make this more realistic and have the External tag?

 
 

6 Replies

  • SecPet001's avatar
    SecPet001
    Copper Contributor
    Hi,
    Anyone found a solution?
    Its very disturbing that adding external domains or IPs to "Third party phishing simulations" (https://security.microsoft.com/advanceddelivery?viewid=PhishingSimulation) removes the External tag? (ExternalInOutlook-feature). Our users learn to not trust the tag 😞
  • JG-Burke Did you get an answer to this elsewhere?  Have started to test the attack simulation training, and the lack of an "External" flag stuck out like a sore thumb.  Can't seem to find much information elsewhere.

     

    Regards, James

    • JG-Burke's avatar
      JG-Burke
      Brass Contributor
      I did not. We continue to use KnowBe4.
  • Hello JG
    Yes, you can enable external email tags via Windows PowerShell by typing the following lines and pressing Enter: `Set-ExternalInOutlook -Enabled $true`. Then restart your PC and check Outlook after 24-48 hours to see if the External warning tag or label appears¹.

    However, external tagging is disabled by default, so you may connect to Exchange online PowerShell and run the command `Set-ExternalInOutlook –Enabled $false`².

    There are multiple ways to add [External] tag to emails received from outside the organization. You can apply [External] tag using transport rule in Exchange and Office 365. You can also set up [External] tag using rules in your third-party gateway³.

    I hope this helps!

    Source: Conversation with Bing, 4/16/2023
    (1) How to Remove The External Tag/Label in Outlook - Windows Report. https://windowsreport.com/outlook-external-tag-remove/.
    (2) Outlook External Email Tag - Microsoft Community. https://answers.microsoft.com/en-us/outlook_com/forum/all/outlook-external-email-tag/726edfb4-fd09-46c9-a2f8-88434e1ca56e.
    (3) Users cannot see [External] tag in OWA and Outlook Conversation View. https://techcommunity.microsoft.com/t5/exchange/users-cannot-see-external-tag-in-owa-and-outlook-conversation/td-p/3565759.

    Hope this help
    • JG-Burke's avatar
      JG-Burke
      Brass Contributor
      Thanks -- not sure you read the question/issue.
      This has to deal with Microsoft's attack simulation -- not external labels. I have external labels on and I have a transport rule to prepend messages. the issue is MS attach simulation ignore those, so the simulation is not realistic.

Resources