Creating a BEC profile
-
Go to Profile > AntiSpam > Business Email Compromise and click New.
-
Assign a particular Domain if required, or system-wide.
-
Enter a Profile name.
-
Under Rule, click New.
- Enter a Name for the rule, and select an appropriate Action.
-
For this example, under Score Allocation, set Action keyword to 20, providing a greater score allocation for emails that contain action keywords.
-
Click Create and OK to create the rule and BEC profile.
Note the Threshold value. This can be increased or decreased to avoid false-positive results, and provide more granular control for how targeted attacks are detected.
|
Note that the threshold is not the sum total of all the categories. While the threshold and category scores are all customizable, the threshold score should equal or be less than the sum total of the categories. If the threshold score is greater than the sum total of the categories, then the threshold will never be triggered. |
|
|
Multiple rules can be created for each BEC profile. |
To configure this step in the CLI Console instead, go to Dashboard > Console and enter the following:
config profile bec
edit <name>
config rule
edit <order-integer>
set action-keyword-score 20
set name action-keyword
next
end
end