Phishing Protection (formerly ClickSMART)

Email Security Phishing Protection is designed to protect customers by rewriting the href URLs contained within emails that VIPRE Email filters. It rescans a URL every time a user clicks on it to safeguard him in case a URL is armed with malicious content at a later date.

If any URL contained in a message is identified to be harmful then all URLs contained in the message are blocked.

A user can customize the behavior of Phishing Protection through the different tabs described below:

URL Configuration

1. Enable Phishing Protection checkbox - It is enabled by default. A user can disable it by clicking on the checkbox
2. Click through action: This contains 2 radio buttons that helps to customize the user experience

a. Block

: This is the default setting. All malicious URLs are blocked

b. Warn and allows

: This pops up a warning message when a user clicks on a malicious URL in their email. The user can then decide if he wants to access the link or not.

 

3. Exclude my own domains: It is enabled by default. A URL is not rewritten if it contains any domains setup under your account under domain and domain list
4. Rewrite anchor link in HTML emails: It is disabled by default. Phishing Protection only rewrites the href URL. Enabling this rewrites the anchor link of the URL. A user should be aware that enabling this feature will change the original presentation of the email since rewritten URLs are very long.
5. Rewrite links in text emails: It is disabled by default. Enabling this will significantly alter the presentation of the text message since the rewritten href URLs are very long.

In order to save changes, click on the “Save” button.

Allowed IPs/Domains

If a user trusts an IP or domain he can add it to this list. IP/Domains on this list are not rewritten by Phishing Protection. This should be used only for trusted domains for e.g. your corporate domain etc.

To add IP/Domain to the list type the details on the text box on the top right corner and click on the “+” sign.

You can remove an IP/Domain from the list by clicking on the trash can next to it.

Templates

This tab allows you to customize the message that the user sees when he clicks on the malicious URL. Click on the “Save” button once you have completed making changes to the messages.