This section includes:
About VIP users
Some end-users may be more prone to impersonation attempts than other end-users. This list of prone end-users may include people such as CEOs and other executives, and marketing and sales-people - that have their contact details freely available on multiple platforms. These end-users may therefore be more vulnerable to Business Email Compromise [BEC] attempts and to phishing attacks.
It is advisable that you define these end-users as VIP users inside Perception Point X‑Ray, in order to be able to pay additional attention to attempted impersonation attacks of these end-users. This is done to help protect end-users in your organization from impersonation attempts of these VIP users.
|
Note: The VIP functionality doesn't add extra protection to the VIP users - rather it adds protection to other users in your organization who may receive emails from people who impersonate the VIP users. |
How does it work?
When you define a VIP user, you list all private email addresses that are used by the VIP user.
When an email is received in your organization, and the email has a similar display name to the name of a VIP user, and the email is sent from an unlisted email address - (while also taking into consideration additional indicators) - Perception Point X‑Ray may assign the email a malicious scan verdict. This is done because the email is possibly trying to impersonate the VIP user.
Why not assign all end-users as VIP users?
By assigning all end-users to be VIP users, you may cause valid emails to be assigned a malicious verdict - because they were sent from an "unlisted" email address.
|
Note: There are no additional Perception Point X‑Ray licensing costs for adding VIP users. |
The VIP Users page
The VIP Users page lets you add and manage the VIP users in your organization.
To open the VIP Users page: In Perception Point X‑Ray, in the left navigation menu, select Detection Setup > VIP Users.
|
The VIP Users page is available to admin users with the "Cyber Analyst" [or higher] role. |
|
|
See the available Adding a VIP user
The procedure below describes how to add a single VIP user. If you have many users that you want to categorize as VIP users, Perception Point Support can assist you to perform a bulk addition of VIP users - using a CSV file. For details, see Adding multiple VIP users below.
After you have added VIP users, you can enable "display name deception" disclaimers. For details, see Disclaimer types.
|
Note: You should add VIP users to child organizations only - not to parent organizations. If you add a VIP user to a parent organization, the details of the VIP user will NOT be propagated to any child organizations. |
To add a new VIP user:
-
In Perception Point X‑Ray, in the left navigation menu, select Detection Setup > VIP Users.
-
In the VIP Users page, click Add. The Add User dialog box opens.
Dialog box options
Organization
[This option may not appear]
The organization that this VIP user is part of - the organization in which Perception Point X‑Ray will scan the emails.
Note: You should add VIP users to child organizations only - not to parent organizations. If you add a VIP user to a parent organization, the details of the VIP user will NOT be propagated to any child organizations.
Display Name
The name that is commonly used to refer to this VIP user.
E.g. James Smith
Note:
-
The display name is not case-sensitive. If you enter "james smith" then "james smith and "James Smith" [and all other permutations] will also be included as VIP users.
-
To add multiple display names [for example, one name is in English and another name is in a different language], add a record for each of the required names.
Main Email Address
The main email address for this VIP user, in the organization.
For example:
James.Smith@acme.com
Additional Email Addresses
Any additional email addresses that are used by the VIP user. These email addresses may be from inside the organization, or they may be external email addresses. Use commas to separate multiple addresses.
For example:
James.Smith@gmail.com,James.Smith@yahoo.com,JSmith@gmail.com
Every email that appears to originate from the VIP user, but that doesn't come from one of the listed email addresses for the VIP user - main or additional - will be assigned a malicious scan verdict.
Display name protected
All VIP users have display name protection. You can't disable this protection.
VIP
Adds a VIP tag to all scan results for emails that are sent to the "Main Email Address" or to any of the "Additional Email Addresses" defined above. In the Scans-summary page, you can filter the emails to show only those emails that were sent to VIP users.
-
-
Click Add. A new VIP user is added.
Adding multiple VIP users
The procedure above in Adding a VIP user describes how to add a single VIP user. If you have many admin users that you want to categorize as VIP users, Perception Point Support can perform a bulk addition of these VIP users. To perform a bulk addition of VIP users, you'll need to create a CSV file. The CSV file that you create should include the following information for each VIP user:
-
Display name
-
Main email address
-
Additional email addresses
See the table above for definitions and requirements of each of these elements. Use commas to separate between values. When the CSV file is available, send it by email to Perception Point Support [support@perception-point.io]
You can include the text template below in your email:
|
||
|---|---|---|
|
Hi Perception Point Support Team, Organization name: <Your org name> We would like to add multiple VIP users. Please can you perform a bulk addition of the VIP users contained in the attached file. [Internal Reference: 1155] Please let us know when this has been done. Thank you |
After Perception Point Support informs you that the VIP users have been enabled, make sure that they appear as expected under Detection Setup > VIP Users.
See also:
