ATP Anti Phishing Policy missing common name spellings

%3CLINGO-SUB%20id%3D%22lingo-sub-291259%22%20slang%3D%22en-US%22%3EATP%20Anti%20Phishing%20Policy%20missing%20common%20name%20spellings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-291259%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%26nbsp%3B%3C%2FP%3E%3CP%3EUsing%20ATP%20anti%20phishing%20polices%20to%20protect%20our%20CEO%2FCFO%2FCOO.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20an%20email%20comes%20from%20display%20names%20that%20have%20alternate%20spellings%20of%20the%20name%20ATP%20Anti%20Phishing%20is%20failing%20to%20quarantine%20the%20messages.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EExample%20-%20spoof%20of%20Matt.Ceo%40fakedomain.com%20%3CMATT%20ceo%3D%22%22%3E%20will%20get%20quarantined.%3C%2FMATT%3E%3C%2FP%3E%3CP%3ESpoof%20of%20same%20user%3A%20matthew.ceo%40fakedomain.com%20%3CMATTHEW%20ceo%3D%22%22%3E%20will%20be%20delivered%20to%20inbox.%3C%2FMATTHEW%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20way%20to%20make%20it%20better%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Super Contributor

Hello, 

Using ATP anti phishing polices to protect our CEO/CFO/COO. 

 

When an email comes from display names that have alternate spellings of the name ATP Anti Phishing is failing to quarantine the messages. 

 

Example - spoof of Matt.Ceo@fakedomain.com <Matt CEO> will get quarantined.

Spoof of same user: matthew.ceo@fakedomain.com <Matthew CEO> will be delivered to inbox.

 

Any way to make it better?

0 Replies