Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have successfully configured our CES/Secure Email hosts to use SAML against Azure AD to authenticate our administrative users to access the web GUI for almost two years, and it was worked pretty flawlessly. Naturally, I was happy to see that they...
I seem to be doing something either incorrectly or am missing something, as I cannot seem to get an Incoming Content Filter to add a header item with a value based on the presence of another header item and its value. The content filter basically s...
I had a question concerning the executive names in the dictionary used by Forged Email Detection (FED). We have successfully implemented FED via a content filter, and it was worked pretty well thus far. I did tune the scoring, however, moving the ...
I have made this change, and I can see the change reflected in the Config.dat file on our AD Connector. I am a little confused, though, from the instructions here. It seems to me that Step 1 and Step 2 are the required steps, and the sections Refresh...
The filter is associated to the correct policy, and I can see log entries included on the email message in question (given that I added that as one of the actions on the content filter. I have included a screenshot below of what is happening. In ...
And a very quick update based on some spoof testing.If I change the dictionary entry to include a middle initial, that means an exact match of that name will score 100. (Splunk makes finding this scoring a lot easier.)In my testing, when I do not inc...
Hi Libin,Your reply is very helpful. Based on that, my two options would be to either:change our threshold to, say, 90, and monitor for false positives; oradd an entry to the dictionary that contains the middle initial for the executive in question,...
