home

Mobile Endpoint Security

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Setting up Phishing and Content Protection

Phishing and Content allows organizations to protect their users, devices, and data from phishing and other content-based threats. It uses an on-device VPN tunnel to analyze network traffic and detect when a browser or app on a device attempts to access a suspicious URL. In the Lookout for Work app, this feature is referred to as "Safe Browsing."

This feature does not support MDM-delivered VPN configuration. The device end user must grant the necessary permissions directly.

To set up Phishing and Content Protection from the Multi-Tenancy Admin Console:

  1. Click Protections in the left navigation bar.
  2. Click the Manage settings for: dropdown and click the policy group you wish to configure:


  3. Click the Phishing and Content Protection tab.
  4. To enable the feature, make sure the Enable Phishing and Content Protection toggle is ON.
  5. Optionally, enable Make Phishing and Content Protection Mandatory.

    This prevents users from using the Enable Safe Browsing toggle in the mobile app to disable Safe Browsing.

  6. To always allow access to certain domains, add the top-level domains or fully qualified domain names to the Allowlisted Content list.

    Lookout does not trigger PCP alerts for allowlisted domains.

  7. To always block certain domains, add the top-level domains or fully qualified domain names to the Denylisted Content list.

    Denylisted domains always trigger whatever policy response you configure for Denylisted Content.

  8. Click Save Changes.
  9. Click Configure Content Policies to go to the Protections tab and configure Web Content Risk Level and Response settings.