Using KnowBe4 with Proofpoint Essentials
| Situation | Trying to use the KnowBe4 product with Proofpoint Essentials Filtering. |
|---|---|
| Solution | Mail flow through Proofpoint Essentials can be done up to a certain extent. |
Proofpoint Essentials Recommendation
Recommended Solution: KnowBe4 directly to mail server
For the best experience for KnowBe4, it would be best to configure their system to send directly to your mail server. This would completely by-pass Proofpoint Essentials scanning, but it would ensure messages with viruses can get through, and reports from all KnowBe4 items would not be impeded by and Proofpoint scanning. Please contact KnowBe4 support on how to configure thier system to send directly to your mail server.
mail flow through Proofpoint Essentials
If you decide to continue with mail to the MX, there are a few items to consider.
Before you start
Prior to setting up KnowBe4, there are a few key statements to be made.
- We understand KnowBe4 is a training product, but Proofpoint Essentials scanning services is designed to stop threats.
- Proofpoint does not block KnowBe4 IPs.
- Certain types of messages may be exempted from scanning with filters.
- Messages with attachments may get stopped as viruses.
- Messages containing viruses are stopped completely. There is no getting around this.
- If customer has Attachment Defense sandbox enabled, this may quarantine the message as a virus.
Mail Flow through Proofpoint
Per the statements above, Proofpiont Essentials filtering can still quarantine a message. The single item that cannot be done is to allow messages we mark as viruses. You can get every other message through, but you have to create filters or approve senders and/or IPs. You will have to go through the KnowBe4 documentation to do this. Please also note that any reporting that you have with KnowBe4 may be skewed due to Proofpoint scanning.
Reporting messages to KnowBe4
We are aware customers of KnowBe4 are instructing their users to report uses to KnowBe4 through the tools allotted. If you are configured to use the Proofpoint Essentials outbound smarthost, please note these messages will be caught as spam, most likely for phishing.
We recommend that you instruct customers who are using this tool to create a custom outbound routing to the email address that KnowBe4 provides and by-pass Proofpoint outbound at the mail server.