{"id":3360,"date":"2018-05-25T01:46:45","date_gmt":"2018-05-25T01:46:45","guid":{"rendered":"http:\/\/pariswells.com\/blog\/?p=3360"},"modified":"2018-05-28T02:27:44","modified_gmt":"2018-05-28T02:27:44","slug":"mimecast-impersonation-protection-not-working","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working","title":{"rendered":"Mimecast Impersonation Protection not working"},"content":{"rendered":"<p>Recently a email\u00a0came in from a third party which wasn&#8217;t blocked by the\u00a0Impersonation Protection<\/p><p>Administration &gt; Gateway &gt; Policies &gt; Impersonation Protection Definitions\u00a0\u00a0<\/p><h2>Default\u00a0Impersonation Protection for Mimecast\u00a0<\/h2><ul><li>Similar Internal Domain (Similarity Distance 2 )\u00a0<\/li><li>Newly Observed Domain ( Checked )\u00a0<\/li><li>Internal User Name ( Checked )\u00a0<\/li><li>Reply-to Address Mismatch ( Uncheck )\u00a0<\/li><li>Targeted Threat Dictionary ( Checked )\u00a0<\/li><li>Mimecast Threat Dictionary ( Checked )\u00a0<\/li><li>Number of Hits : 2<\/li><li>Ignore Signed Messages ( Unchecked )\u00a0<\/li><\/ul><p>For executives, particularly those who are disclosed on the company website I recommend implementing a hit score of 1 on emails with their name as a display name.\u00a0<br \/><br \/><\/p><h2>Exec Impersonation Protection<\/h2><ul><li>Similar Internal Domain\u00a0 ( Checked )\u00a0<\/li><li>Newly Observed Domain\u00a0 ( Checked )\u00a0<\/li><li>Internal User name\u00a0 ( Checked )\u00a0<\/li><li>Number of Hits: 1\u00a0<\/li><\/ul><p><br \/>Administration &gt; Gateway &gt; Policies &gt; Impersonation Protection &gt; New Policy\u00a0<\/p><p><br \/>Selection Option: Choose the new definition that was just created\u00a0<br \/>Addresses based on: Both\u00a0<br \/>Applies from: Header Display Name\u00a0<br \/>Specifically: INSERT NAME\u00a0<br \/>Applies To: Internal Addresses\u00a0<br \/>Save and Exit\u00a0<br \/><br \/>I would advise that display name checks are in place all high profile targets, particularly those disclosed on the company website or other public sources. You also may want to consider alternative spellings. An individual policy is required for each display name.\u00a0<\/p>","protected":false},"excerpt":{"rendered":"<p>Recently a email\u00a0came in from a third party which wasn&#8217;t blocked by the\u00a0Impersonation ProtectionAdministration &gt; Gateway &gt; Policies &gt; Impersonation Protection Definitions\u00a0\u00a0Default\u00a0Impersonation Protection for Mimecast\u00a0Similar Internal Domain [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[2500,1797,1410],"class_list":["post-3360","post","type-post","status-publish","format-standard","hentry","category-random","tag-impersonation-protection","tag-mimecast","tag-policy"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.8 - aioseo.com -->\n\t<meta name=\"description\" content=\"Recently a email came in from a third party which wasn&#039;t blocked by the Impersonation ProtectionAdministration &gt; Gateway &gt; Policies &gt; Impersonation Protection Definitions Default Impersonation Protection for Mimecast Similar Internal Domain (Similarity Distance 2 ) Newly Observed Domain ( Checked ) Internal User Name ( Checked ) Reply-to Address Mismatch ( Uncheck ) Targeted Threat Dictionary ( Checked ) Mimecast Threat Dictionary ( Checked\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"paris\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.8\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Welcome to Pariswells.com |\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Mimecast Impersonation Protection not working | Welcome to Pariswells.com\" \/>\n\t\t<meta property=\"og:description\" content=\"Recently a email came in from a third party which wasn&#039;t blocked by the Impersonation ProtectionAdministration &gt; Gateway &gt; Policies &gt; Impersonation Protection Definitions Default Impersonation Protection for Mimecast Similar Internal Domain (Similarity Distance 2 ) Newly Observed Domain ( Checked ) Internal User Name ( Checked ) Reply-to Address Mismatch ( Uncheck ) Targeted Threat Dictionary ( Checked ) Mimecast Threat Dictionary ( Checked\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2018-05-25T01:46:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2018-05-28T02:27:44+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Mimecast Impersonation Protection not working | Welcome to Pariswells.com\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Recently a email came in from a third party which wasn&#039;t blocked by the Impersonation ProtectionAdministration &gt; Gateway &gt; Policies &gt; Impersonation Protection Definitions Default Impersonation Protection for Mimecast Similar Internal Domain (Similarity Distance 2 ) Newly Observed Domain ( Checked ) Internal User Name ( Checked ) Reply-to Address Mismatch ( Uncheck ) Targeted Threat Dictionary ( Checked ) Mimecast Threat Dictionary ( Checked\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/random\\\/mimecast-impersonation-protection-not-working#article\",\"name\":\"Mimecast Impersonation Protection not working | Welcome to Pariswells.com\",\"headline\":\"Mimecast Impersonation Protection not working\",\"author\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/author\\\/paris#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/#organization\"},\"datePublished\":\"2018-05-25T01:46:45+00:00\",\"dateModified\":\"2018-05-28T02:27:44+00:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/random\\\/mimecast-impersonation-protection-not-working#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/random\\\/mimecast-impersonation-protection-not-working#webpage\"},\"articleSection\":\"Random, Impersonation Protection, mimecast, policy\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/random\\\/mimecast-impersonation-protection-not-working#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/pariswells.com\\\/blog\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/category\\\/random#listItem\",\"name\":\"Random\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/category\\\/random#listItem\",\"position\":2,\"name\":\"Random\",\"item\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/category\\\/random\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/random\\\/mimecast-impersonation-protection-not-working#listItem\",\"name\":\"Mimecast Impersonation Protection not working\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/random\\\/mimecast-impersonation-protection-not-working#listItem\",\"position\":3,\"name\":\"Mimecast Impersonation Protection not working\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/category\\\/random#listItem\",\"name\":\"Random\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/#organization\",\"name\":\"Welcome to Pariswells.com\",\"url\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/author\\\/paris#author\",\"url\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/author\\\/paris\",\"name\":\"paris\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/random\\\/mimecast-impersonation-protection-not-working#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/93b8ee3f592ac401167f870452bd82d43de80152cd3524e2853403658ada9984?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"paris\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/random\\\/mimecast-impersonation-protection-not-working#webpage\",\"url\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/random\\\/mimecast-impersonation-protection-not-working\",\"name\":\"Mimecast Impersonation Protection not working | Welcome to Pariswells.com\",\"description\":\"Recently a email came in from a third party which wasn't blocked by the Impersonation ProtectionAdministration > Gateway > Policies > Impersonation Protection Definitions Default Impersonation Protection for Mimecast Similar Internal Domain (Similarity Distance 2 ) Newly Observed Domain ( Checked ) Internal User Name ( Checked ) Reply-to Address Mismatch ( Uncheck ) Targeted Threat Dictionary ( Checked ) Mimecast Threat Dictionary ( Checked\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/random\\\/mimecast-impersonation-protection-not-working#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/author\\\/paris#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/author\\\/paris#author\"},\"datePublished\":\"2018-05-25T01:46:45+00:00\",\"dateModified\":\"2018-05-28T02:27:44+00:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/\",\"name\":\"Welcome to Pariswells.com\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Mimecast Impersonation Protection not working | Welcome to Pariswells.com","description":"Recently a email came in from a third party which wasn't blocked by the Impersonation ProtectionAdministration > Gateway > Policies > Impersonation Protection Definitions Default Impersonation Protection for Mimecast Similar Internal Domain (Similarity Distance 2 ) Newly Observed Domain ( Checked ) Internal User Name ( Checked ) Reply-to Address Mismatch ( Uncheck ) Targeted Threat Dictionary ( Checked ) Mimecast Threat Dictionary ( Checked","canonical_url":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working#article","name":"Mimecast Impersonation Protection not working | Welcome to Pariswells.com","headline":"Mimecast Impersonation Protection not working","author":{"@id":"https:\/\/pariswells.com\/blog\/author\/paris#author"},"publisher":{"@id":"https:\/\/pariswells.com\/blog\/#organization"},"datePublished":"2018-05-25T01:46:45+00:00","dateModified":"2018-05-28T02:27:44+00:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working#webpage"},"isPartOf":{"@id":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working#webpage"},"articleSection":"Random, Impersonation Protection, mimecast, policy"},{"@type":"BreadcrumbList","@id":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog#listItem","position":1,"name":"Home","item":"https:\/\/pariswells.com\/blog","nextItem":{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog\/category\/random#listItem","name":"Random"}},{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog\/category\/random#listItem","position":2,"name":"Random","item":"https:\/\/pariswells.com\/blog\/category\/random","nextItem":{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working#listItem","name":"Mimecast Impersonation Protection not working"},"previousItem":{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working#listItem","position":3,"name":"Mimecast Impersonation Protection not working","previousItem":{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog\/category\/random#listItem","name":"Random"}}]},{"@type":"Organization","@id":"https:\/\/pariswells.com\/blog\/#organization","name":"Welcome to Pariswells.com","url":"https:\/\/pariswells.com\/blog\/"},{"@type":"Person","@id":"https:\/\/pariswells.com\/blog\/author\/paris#author","url":"https:\/\/pariswells.com\/blog\/author\/paris","name":"paris","image":{"@type":"ImageObject","@id":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/93b8ee3f592ac401167f870452bd82d43de80152cd3524e2853403658ada9984?s=96&d=mm&r=g","width":96,"height":96,"caption":"paris"}},{"@type":"WebPage","@id":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working#webpage","url":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working","name":"Mimecast Impersonation Protection not working | Welcome to Pariswells.com","description":"Recently a email came in from a third party which wasn't blocked by the Impersonation ProtectionAdministration > Gateway > Policies > Impersonation Protection Definitions Default Impersonation Protection for Mimecast Similar Internal Domain (Similarity Distance 2 ) Newly Observed Domain ( Checked ) Internal User Name ( Checked ) Reply-to Address Mismatch ( Uncheck ) Targeted Threat Dictionary ( Checked ) Mimecast Threat Dictionary ( Checked","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/pariswells.com\/blog\/#website"},"breadcrumb":{"@id":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working#breadcrumblist"},"author":{"@id":"https:\/\/pariswells.com\/blog\/author\/paris#author"},"creator":{"@id":"https:\/\/pariswells.com\/blog\/author\/paris#author"},"datePublished":"2018-05-25T01:46:45+00:00","dateModified":"2018-05-28T02:27:44+00:00"},{"@type":"WebSite","@id":"https:\/\/pariswells.com\/blog\/#website","url":"https:\/\/pariswells.com\/blog\/","name":"Welcome to Pariswells.com","inLanguage":"en-US","publisher":{"@id":"https:\/\/pariswells.com\/blog\/#organization"}}]},"og:locale":"en_US","og:site_name":"Welcome to Pariswells.com |","og:type":"article","og:title":"Mimecast Impersonation Protection not working | Welcome to Pariswells.com","og:description":"Recently a email came in from a third party which wasn't blocked by the Impersonation ProtectionAdministration &gt; Gateway &gt; Policies &gt; Impersonation Protection Definitions Default Impersonation Protection for Mimecast Similar Internal Domain (Similarity Distance 2 ) Newly Observed Domain ( Checked ) Internal User Name ( Checked ) Reply-to Address Mismatch ( Uncheck ) Targeted Threat Dictionary ( Checked ) Mimecast Threat Dictionary ( Checked","og:url":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working","article:published_time":"2018-05-25T01:46:45+00:00","article:modified_time":"2018-05-28T02:27:44+00:00","twitter:card":"summary","twitter:title":"Mimecast Impersonation Protection not working | Welcome to Pariswells.com","twitter:description":"Recently a email came in from a third party which wasn't blocked by the Impersonation ProtectionAdministration &gt; Gateway &gt; Policies &gt; Impersonation Protection Definitions Default Impersonation Protection for Mimecast Similar Internal Domain (Similarity Distance 2 ) Newly Observed Domain ( Checked ) Internal User Name ( Checked ) Reply-to Address Mismatch ( Uncheck ) Targeted Threat Dictionary ( Checked ) Mimecast Threat Dictionary ( Checked"},"aioseo_meta_data":{"post_id":"3360","title":null,"description":null,"keywords":null,"keyphrases":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"location":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2020-12-21 05:35:49","updated":"2022-09-19 03:21:47","primary_term":null,"seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/pariswells.com\/blog\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/pariswells.com\/blog\/category\/random\" title=\"Random\">Random<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tMimecast Impersonation Protection not working\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/pariswells.com\/blog"},{"label":"Random","link":"https:\/\/pariswells.com\/blog\/category\/random"},{"label":"Mimecast Impersonation Protection not working","link":"https:\/\/pariswells.com\/blog\/random\/mimecast-impersonation-protection-not-working"}],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/3360","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=3360"}],"version-history":[{"count":3,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/3360\/revisions"}],"predecessor-version":[{"id":3364,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/3360\/revisions\/3364"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=3360"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=3360"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=3360"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}