This article provides step-by-step instructions for configuring Mimecast Outlook end-user reporting and setting up mail flow rules in Microsoft Exchange to forward phishing reports to PhishArm
Step 01: Configure Mimecast Outlook End-User Reporting
Step 01: Configure Mimecast Outlook End-User Reporting
Please follow this MIMECAST ARTICLE to set up Microsoft Outlook End-User Reporting with Mimecast.
Step 02: Add PhishArm Mail Contact in the Exchange admin center
Step 02: Add PhishArm Mail Contact in the Exchange admin center
Set up the Right-Hand reporting email contact.
To do this, log in to your Exchange Admin Center, then go to Recipients > Contacts to add the reporting email.
Click Add a mail contact.
In the New Mail Contact pane, type your details:
a) Display Name: The name appearing on the Contacts page.
b) Alias: Type PhishArm as the Alias name.
c) External email address: Type [email protected] as a contact.
Click Next. The Mail contact information (optional) appears.
Click Next.
The Review mail contact displays the summary of data entered.
Review the data and click Create.
The new contact will take a while to appear on the Contacts page. You can refresh the page or wait for some more time for the contact to occur.
Step 03: Add Mail flow rules in the Exchange admin center
Step 03: Add Mail flow rules in the Exchange admin center
Rule A - Send all types of reports to PhishArm.
The following steps will help you add the Mail flow rules:
Now, navigate to Mail flow > Rules > click the + icon (add new rule). You can copy the existing rules for future reference.
From the + icon (add new rule) drop-down, select Create new rule…
In the new rule window, in the Name field, type the rule's name.
From the Apply this rule if… drop-down, select The recipient is this person…
In the specified words or phrases pop-up, type in the Mimecast mailbox email selected at the beginning.
As we finish the condition, we have to define the action.
From the Do the following… drop-down, select Redirect the message to and from the options, select these recipient.Click on Select On, and a window with the list of all the contacts will appear. Search for the right-hand reporting email, i.e., [email protected], and select it. Then click on the save button to save the recipient.
Now Click on the Next button and set the following values to
Click on Next and then the Finish button. The rule will appear in the list.
Now, we need to edit this rule further. Click on the rule, and it will open the slider. Enable this rule by clicking the toggle and then clicking on the rule settings. Change the Priority to 0 and click on the save button.
After that, the rule will appear enabled at the list's top.
The configuration has been successfully set up :)
Rule B - Send only simulation emails to PhishArm.
The following steps will help you add the Mail flow rules:
Now, navigate to Mail flow > Rules > click the + icon (add new rule). You can copy the existing rules for future reference.
From the + icon (add new rule) drop-down, select Create new rule…
In the new rule window, in the Name field, type the rule's name.
From the Apply this rule if… drop-down, select The recipient is this person…
In the specified words or phrases pop-up, type in the Mimecast mailbox email selected at the beginning.
As we finish the condition, we have to define the action.
From the Apply this rule if… drop-down, select the option The Subject or body and in the condition, select subject or body includes any words. In the specified words or phrases pop-up, add the following two options.
linktosso.com
linktologin.com
From the Do the following… drop-down, select Redirect the message to and from the options, select these recipient.
Click on Select On, and a window with the list of all the contacts will appear. Search for the Right-Hand reporting email, i.e., [email protected], and select it, then click on the save button to save the recipient.
Now, click on the Next button and set the following values to
Click on Next and then the Finish button. The rule will appear in the list.
Now, we need to edit this rule further. Click on the rule, and it will open the slider. Enable this rule by clicking the toggle and then clicking on the rule settings. Change the Priority to 0 and click on the save button.
After that, the rule will appear enabled at the top of the list.