Phish Threat
Suggest, discuss, and vote on new ideas for Sophos Phish Threat. Phishing attack simulation and training for your end users.
-
When you are creating a phish threa
When you create a new threat, as you pick the threat and the schooling vedio afterowrds you get to a page where you can edit it, and there is a drop down window for domains, so you can pick from pre chosen domains like it-supportdesk.com etc.
Why cant i add my own, if I want to send them something and pretend its coming from our IT department, they would expect it to be like all the other e mails, can you make it where we can add our own?1 vote -
Custom web redirection
I'd like to be able to redirect users who have clicked through a phishing link to a customised page (e.g. A "Whoops, you clicked it page"). This would need to redirect after the initial click so the failure still records
1 vote -
PT V2 Needs Help With Notifications!!!!! Make it REALLY OBVIOUS that the training is complete.
PT V2 Needs Help With Notifications!!!!! Make it REALLY OBVIOUS that the training is complete. Send a follow-up email to confirm completion. Allow the end-user to lookup their trainings and results. Take the burden off of IT for looking up completion status, since it is far too subtle for the end user to glean. This is a BIG DEAL, because of the glitchy buttons and functions of training on various browsers and OSs. Please address and let me know, as Sophos tech support sent me here as a way to resolve my issues and enhancement requests.
1 vote -
quiz report in detail
the report should have more visibility for the quiz result
for examplenumber of exams taken by this user (how many times he failed?)
what's the score he passed the exam1 vote -
Long-Term Phishing Campaigns That Randomly & Repeatedly Get Sent to the Same Users
I'm very excited about the entire Sophos product line but I must say, the Phishing service seems very weak. There is one feature that, if implemented, would be extremely valuable. I propose letting systems admins such as myself create a long-term campaign that repeatedly and randomly sends random phishing emails that are pre-selected, to a group of people. In this way, the people in the organization would continually receive phishing emails that are randomly chosen, over a longer period of time. Right now, each campaign only sends one email to each person and in order to send them a phishing…
2 votes -
Phish Threat actions should show in audit log
Currently Phish threat actions (creation,deletion, modification) do not show in the audit logs on the Central Dashboard. This would be an important feature for accounting purposes.
There would be no way to track/audit unwanted creations/deletions campaigns which is an important security feature.
3 votes -
The pre-requisites for Office 365 ATP configuration need to be easily seen by Central administrators.
Neither the help pages or Central admin have any links or make any mention of the pre-requisites for Office 365.
These need to be easily seen by Central administrators - the help pages are unhelpful and entirely lacking in information. A simple reference to the KB URL: https://sophos.com/kb/131747 would solve this and prevent unhappy administrators.TO QUOTE from the existing help pages : https://docs.sophos.com/central/Customer/help/en-us/central/Customer/concepts/PhishThreatSettings.html
Sending domains and IPsHere you can see the domains and IP addresses used for sending campaign email from Phish Threat.
Note You must allow mail and web traffic to and from these IPs and domains…2 votes -
Add Campaign Title to Reminder Email
It would be really useful if the system could add the training title into the body of the reminder email. We are frequently running multiple trainings at once and have no easy way to determine which specific training a user is asking about just by looking at the reminder email itself. Currently, we have to touch each campaign that's running to figure out the specific one.
2 votes -
Message that emails are scanned
Is it possible to have the OPTION to the bottom of the email mentioning that emails are scanned with SOPHOS? This is what Symantec Cloud added to our emails.
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com1 vote -
Add New Language
Is it possible If I request Indonesian language content both Phishing and Training campaign ?
1 vote -
The ability for the Enterprise Admin to see Phish Treat campaign results for each sub domain
Right now there is no functionality for the Enterprise Admins to see the sub domains Phish Threat results. The Enterprise admin should be able to know how each sub group is doing.
1 vote -
Ability to add routes for email
In order to effectively bypass cloud based third party spam and AV scanners, the ability to add a static route for email so they are delivered directly to the recipient server would ensure that false positives from link scanning would not occur and Phish Threat emails would not be blocked.
2 votes -
Automatically Add / Delete Users from Already-Built Campaigns
For some of our clients, we've built training/phish programs that run several months long. For campaigns that have been built but not yet kicked off, it would be really useful for the system to automatically add users to those campaigns (or delete them if the user has left the company), rather than us going in and manually touching every future campaign we've built for the client.
7 votes -
Edit Attachments or Use Custom Attachments
Like many other solutions it would be nice to be able to edit every facet of the campaigns in order to tailor them to our businesses. This would include the ability to customize the attachments sent in attachment campaigns.
2 votes -
Phish Threat Quiz Visibility
We had numerous complaints from users that they completed training but kept receiving email reminders. In reality, they did not noticed the "Quiz" button and assumed that was it.
Would be nice to have some kind of highly visible pop up after video is over to tell users that there is also a quiz to follow.
3 votes -
Phish Threat Reporting
It would be great to integrate Phish Reporting with G Suite Gmail and not only Outlook.
3 votes -
General settings in Phish Threat V2 missing options
In Phish V1 there were several "General Settings" which gave options such as these features should make it over to V2 as they are important settings required:
- Email Sending
- Training Reminders
- Grading Options
- Notify employee's manager on failed phishing attacks
- Responses to Phishing Email
- Language options4 votes -
Automatically enroll users in a default campaign
In Phish V1 they had the ability to enroll newly added users to a default campaign. This feature was not carried over to V2.
2 votes -
Enroll users in an active training campaign
Allow the ability to add users to an existing and running campaign
5 votes -
When enrolling multiple users the Select All button should choose all customers
Submitting on behalf of client.
If you create a campaign and want to select all users in the organisation the "Select All" button only selects all users in the current view. For example if you have 200 users, hit "Select All" it would make sense to choose all 200 however only 50 users are selected at a time.
You can scroll down in the list, let it populate, scroll down, repeat until you reach the bottom then hit the "Select All" button, however this is inconvenient for large lists.
Only workaround at this time is to add all users to…
3 votes
- Don't see your idea?
