How to Set Up Smishing on your Tenant
- In the MES console, navigate to Protections and click the Smishing tab.
- Choose the Group you want to enable Smishing for or use the default group to copy settings to multiple groups.
- Slide the Enable Smishing toggle to ON.
- Set each of Phishing, Malicious, and Executive Impersonation content settings as needed:
- Enable the Content Type. Slide the toggle to ON. This enables the feature to scan messages and generate threat notifications in the MES Console.
- Enable iOS Message filtering. Slide the toggle to ON. This filters messages to junk folders on iOS devices.(Android devices only receive alerts).
- Enable Alert Device. Slide the toggle to ON. This sends alerts to end-user devices.
- Set Custom Message: Enter an appropriate alert message to send if that content type is detected.
- For Executive Impersonation (Premium bundle license or Add-on only), set up Safe Senders. This is a list of company executives and important personnel at risk of being impersonated to gain access to resources or company information. The Safe Senders list can only be configured in the Default Group level. You may populate the Safe Senders list in the following two ways in the Smishing tab Executive Impersonation Content Settings section:
Manually enter each entry using the controls displayed on screen. Lookout strongly recommends that you enter full names (first and last) to avoid false positives.
Upload a safe sender list in .csv format.
You can download the .csv safe senders template by clicking the link in this section of the admin console.
- Configure Smishing Device Policy (Android only).
- Navigate to Protections and click Smishing Permissions Not Accepted.
- Enable this policy if it is not already enabled. This alerts administrators when Android users have not accepted Smishing permissions. Encourage those users to accept the permission.
- Click the Smishing Protection tab to return to smishing settings.
- Finally, for comprehensive protection, enable Phishing and Content Protection if not already enabled.
- Navigate to Protections and click the Phishing and Content Protection tab.
- Toggle Enable Phishing and Content Protection to ON
- Click Save changes to continue. See the The Phishing and Content Protection Tab for the procedure to configure Phishing and Content Protection.