Security Awareness Phish Alarm Admin Guide
PhishAlarm & Analyzer - Proofpoint Essentials Security Awareness
PhishAlarm® is an Add-in for Microsoft Exchange that allows users to easily report suspicious email without being encumbered to remember an ever-changing abuse box address or the correct format (headers and email bodies) to forward suspicious emails. PhishAlarm displays a button in the supported email client which, when clicked, will forward the email to defined email addresses. Typically, these email addresses are either an abuse box or members of your organization’s incident response and security team.
PhishAlarm Add-in is provided as a manifest URL for Microsoft Exchange. It can be configured and customized to meet the needs and branding of your company. You can decide how you want the PhishAlarm button to look and act, which notification messages display to the user based on the type of email reported, what you want the messages to say, and what you want done with the email after it’s reported.
Depending on how you configure PhishAlarm, the suspected email can be deleted or moved to a junk folder. It can also be forwarded to a pre-defined list of email addresses for further analysis. PhishAlarm can be configured to recognize and route different categories of emails to the appropriate team or individual. For example, the system can recognize emails sent from Proofpoint’s Security Education Platform and route them to the appropriate individuals within the organization. Similarly, if any simulated mock-phishing emails are reported, they can be forwarded to the Security Awareness team, whereas other reported emails are sent to the Threat Response team.
Here are four categories of emails that you will be able to configure in PhishAlarm:
- Simulated Phish - Emails sent from a Phishing Simulation campaign.
- Potential Phish - Emails that are not any of the other categories (Simulated phish, Safelist email, or Proofpoint training email).
- Safelist - Emails that are designated as safe and adhere to a set of rules configured on the Safelist tab.
- Proofpoint Training - Email notifications sent from the Proofpoint Platform including Training Assignment and Reminder notifications.
PhishAlarm & Analyzer Configuration
This Admin Guide provides information about PhishAlarm installation and how it can be configured and customized to meet the needs and branding of your company.
.
Microsoft Exchange Supported and Features Supported Per Client
Below are details about how PhishAlarm integrates with Microsoft Exchange as well as a list of features.
1 PhishAlarm for Exchange must adhere to browser requirements depending on the version of Outlook and operating system in use. Please refer to this Microsoft Docs article for more information: Browsers used by Office Web add-ins.
2 Supported only in Office 365. Mobile add-ins are not supported on the U.S. Government Community Cloud (GCC) or on- premise Microsoft Exchange Servers.
3 PhishAlarm For Gmail add-on is only accessible when an email account is opened either within a desktop web browser window or within the Gmail mobile app. It is not available within mobile web browsers.
Features Support Per Email Client
The following feature matrix notes the capabilities supported when PhishAlarm is installed within specific email clients.
