Phish Threat
Suggest, discuss, and vote on new ideas for Sophos Phish Threat. Phishing attack simulation and training for your end users.
-
PT V2 Needs Help With Notifications!!!!! Make it REALLY OBVIOUS that the training is complete.
PT V2 Needs Help With Notifications!!!!! Make it REALLY OBVIOUS that the training is complete. Send a follow-up email to confirm completion. Allow the end-user to lookup their trainings and results. Take the burden off of IT for looking up completion status, since it is far too subtle for the end user to glean. This is a BIG DEAL, because of the glitchy buttons and functions of training on various browsers and OSs. Please address and let me know, as Sophos tech support sent me here as a way to resolve my issues and enhancement requests.
1 vote -
quiz report in detail
the report should have more visibility for the quiz result
for examplenumber of exams taken by this user (how many times he failed?)
what's the score he passed the exam1 vote -
Long-Term Phishing Campaigns That Randomly & Repeatedly Get Sent to the Same Users
I'm very excited about the entire Sophos product line but I must say, the Phishing service seems very weak. There is one feature that, if implemented, would be extremely valuable. I propose letting systems admins such as myself create a long-term campaign that repeatedly and randomly sends random phishing emails that are pre-selected, to a group of people. In this way, the people in the organization would continually receive phishing emails that are randomly chosen, over a longer period of time. Right now, each campaign only sends one email to each person and in order to send them a phishing…
1 vote -
Phish Threat actions should show in audit log
Currently Phish threat actions (creation,deletion, modification) do not show in the audit logs on the Central Dashboard. This would be an important feature for accounting purposes.
There would be no way to track/audit unwanted creations/deletions campaigns which is an important security feature.
1 vote -
The pre-requisites for Office 365 ATP configuration need to be easily seen by Central administrators.
Neither the help pages or Central admin have any links or make any mention of the pre-requisites for Office 365.
These need to be easily seen by Central administrators - the help pages are unhelpful and entirely lacking in information. A simple reference to the KB URL: https://sophos.com/kb/131747 would solve this and prevent unhappy administrators.TO QUOTE from the existing help pages : https://docs.sophos.com/central/Customer/help/en-us/central/Customer/concepts/PhishThreatSettings.html
Sending domains and IPsHere you can see the domains and IP addresses used for sending campaign email from Phish Threat.
Note You must allow mail and web traffic to and from these IPs and domains…1 vote -
Add Campaign Title to Reminder Email
It would be really useful if the system could add the training title into the body of the reminder email. We are frequently running multiple trainings at once and have no easy way to determine which specific training a user is asking about just by looking at the reminder email itself. Currently, we have to touch each campaign that's running to figure out the specific one.
2 votes -
Message that emails are scanned
Is it possible to have the OPTION to the bottom of the email mentioning that emails are scanned with SOPHOS? This is what Symantec Cloud added to our emails.
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com1 vote -
Add New Language
Is it possible If I request Indonesian language content both Phishing and Training campaign ?
1 vote -
The ability for the Enterprise Admin to see Phish Treat campaign results for each sub domain
Right now there is no functionality for the Enterprise Admins to see the sub domains Phish Threat results. The Enterprise admin should be able to know how each sub group is doing.
1 vote -
Ability to add routes for email
In order to effectively bypass cloud based third party spam and AV scanners, the ability to add a static route for email so they are delivered directly to the recipient server would ensure that false positives from link scanning would not occur and Phish Threat emails would not be blocked.
2 votes -
Automatically Add / Delete Users from Already-Built Campaigns
For some of our clients, we've built training/phish programs that run several months long. For campaigns that have been built but not yet kicked off, it would be really useful for the system to automatically add users to those campaigns (or delete them if the user has left the company), rather than us going in and manually touching every future campaign we've built for the client.
6 votes -
Edit Attachments or Use Custom Attachments
Like many other solutions it would be nice to be able to edit every facet of the campaigns in order to tailor them to our businesses. This would include the ability to customize the attachments sent in attachment campaigns.
2 votes -
Phish Threat Quiz Visibility
We had numerous complaints from users that they completed training but kept receiving email reminders. In reality, they did not noticed the "Quiz" button and assumed that was it.
Would be nice to have some kind of highly visible pop up after video is over to tell users that there is also a quiz to follow.
2 votes -
Phish Threat Reporting
It would be great to integrate Phish Reporting with G Suite Gmail and not only Outlook.
2 votes -
General settings in Phish Threat V2 missing options
In Phish V1 there were several "General Settings" which gave options such as these features should make it over to V2 as they are important settings required:
- Email Sending
- Training Reminders
- Grading Options
- Notify employee's manager on failed phishing attacks
- Responses to Phishing Email
- Language options3 votes -
Automatically enroll users in a default campaign
In Phish V1 they had the ability to enroll newly added users to a default campaign. This feature was not carried over to V2.
2 votes -
Enroll users in an active training campaign
Allow the ability to add users to an existing and running campaign
3 votes -
When enrolling multiple users the Select All button should choose all customers
Submitting on behalf of client.
If you create a campaign and want to select all users in the organisation the "Select All" button only selects all users in the current view. For example if you have 200 users, hit "Select All" it would make sense to choose all 200 however only 50 users are selected at a time.
You can scroll down in the list, let it populate, scroll down, repeat until you reach the bottom then hit the "Select All" button, however this is inconvenient for large lists.
Only workaround at this time is to add all users to…
3 votes -
Use Sophos DNS names for click tracking
Currently, it is required to whitelist all off Amazon tracking (*.awstrack.me) globally. This presents a potential privacy and security issue as it is so broad.
Amazon allows for and documents how to use alias records so that customers see your DNS names and not Amazon's. It is easier to whitelist all of Sophos than it is to whitelist all of Amazon. As a security company, correcting these perceived issues should be paramount.
See the link to Amazon's documentation for details.
https://docs.aws.amazon.com/ses/latest/DeveloperGuide/configure-custom-open-click-domains.html
3 votes -
Right-Click Report Message
Add a way to report an email without Opening or using the Preview Pane.
Like a right click context option, or allow the button to work on selected message without the reading pane active.
2 votes
- Don't see your idea?
