How do I create Anti-Phishing Blacklist rule on Cloud App Security?

03/26/2020 4 6644

DESCRIPTION:

This article describes how to block suspected phishing emails based on subject, sender IP/name/email address, domain name. 

RESOLUTION:

In order to create Anti-phishing blacklist rule:

• Navigate to Dashboard. 
• Click on a suspected phishing email for which you would like to create blacklist rule.
• Click create blacklist rule option available under security stack as shown below:

• Enable the check box based on the criteria of the email that you would like to block.
• Click 'create blacklist rule' and Yes.

In order to view the list of blacklisted email conditions navigate  to Anti-phishing Blacklist under Configuration page:

To remove conditions from the Anti-Phishing Blacklist list:

1. Navigate to Configuration | Anti-phishing Blacklist.
2. Select the condition you want to remove from the Anti-Phishing Blacklist list.
3. Click the Remove button.
4.  When prompted, click OK.