Forum Discussion
email quarantine and reason "high confidence phish"
Hi I started testing a phishing email campaign from an external vendor KnowBe4. The emails keep going to quarantine reason "high confidence phish" What is the best way to fix this? I tried...
It's a bit of a disgrace that when a security stack contains solutions from different vendors, they happily list each other's test resources as "threats" presumably because users report the test resources as malicious. Given that many of them are west coast US, I'm surprised that the US DHS does not knock heads together and say "you will co-operate".
I worked with KnowB4 a few years back and they definitely offer a support paper or two to help M365 admins exempt their senders and links. If you have a proxy or intelligent firewall, you will have to do the same things there.
If you are on evaluation, don't make the mistake of letting the reseller run the test for you. It's easy to focus on the test result and forget about the usability of the interface launching and measuring the simulated attack.
I worked with KnowB4 a few years back and they definitely offer a support paper or two to help M365 admins exempt their senders and links. If you have a proxy or intelligent firewall, you will have to do the same things there.
If you are on evaluation, don't make the mistake of letting the reseller run the test for you. It's easy to focus on the test result and forget about the usability of the interface launching and measuring the simulated attack.