459
Views
1
Helpful
2
Replies
What is the solution to block look-a-domain emails in IronPort?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-18-2023 07:48 AM
What is the solution to block look-a-domain emails in IronPort?
Labels:
- Labels:
-
Email Security
2 Replies 2
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-18-2023 07:54 AM
So we use the freebie domain doppelganger tool from Knowbe4, and create a dictionary form the results of any domain that's registered.
We then block any mail matches that dictionary using a content filter.
When esa 15.x releases, I'll use a script to run dnstwist to update the dictionary via API instead of manually.
We then block any mail matches that dictionary using a content filter.
When esa 15.x releases, I'll use a script to run dnstwist to update the dictionary via API instead of manually.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-07-2023 06:45 AM
Any documentation on how to use that script ?
What are the major steps involved to have this dnstwist setup ?