The Settings menu allows you to manage and have full control over your system’s core configurations. To ensure your adjustments take effect, always remember to click Save Changes in the top-right corner before navigating away.

Updating Your Settings

To update, review, and make changes to your settings, follow the steps below:

1. Log in to the Defend console.
2. Navigate to Settings.
3. Configure your settings accordingly.
4. When you have finished making changes, select Save Changes in the top-right corner of the page.

Configurable Settings

The configurable settings for Defend post-delivery are as follows:

• Threat Notification
  • Select which threat notifications and category tags are enabled for your users.

• Phishing Simulation Tests

  Choose how Defend classifies phishing simulation emails:

  • Disabled (default): Defend classifies the email as it normally would.
  • Benign: Applies External-level banners and actions to the email.
  • Suspicious: Applies Suspicious-level banners and actions to the email.
  • Dangerous: Applies Dangerous-level banners and actions to the email.

  This setting defaults to Disabled, and any changes you make are recorded in the admin audit log.

  For more information, see the Post-Delivery Defend Best Practices for Phishing Simulation Tests article.

• Auto-Remediation
  • Select where to move or report suspicious and dangerous emails.
• Email Productivity
  • Choose how Defend handles emails categorized as graymail and spam.
  • Users can also register these preferences directly from Microsoft Outlook by moving emails between folders. For more information, see the Folder-Move Preferences section below.
• Link to Microsoft 365
  • Linking with Microsoft 365 enables you to analyze user mailbox history and investigate or remediate threats directly in Defend.
• Allow Filtering in Recent Emails
  • Choose who can view all emails on the Recent Emails page.
• Allow View, Download, and Delete of an External Email
  • Select if admins with permissions can view, download, and delete external emails from the Recent Emails page.
• Allow KnowBe4 Intelligence to View Emails
  • Select if KnowBe4 intelligence will be able to access phishing emails and suspected missed phishing emails in the Recent Emails Operations tab to aid investigation.
• Secure Email Gateway (SEG)
  • Select which SEG, if any, your organization uses to allow seamless integration with Defend.
• Organization Impersonation Attacks
  • Add, edit, or delete your organization’s secondary domains and protected names to aid in the prevention of impersonation attacks.
• Linguistic Analysis
  • Add, edit, or delete custom subject line phrases that your organization uses.
• Default Language
  • Select which language tags and threat notifications are written in.

Folder-Move Preferences

When Productivity is enabled, users can register their graymail and spam preferences by moving emails between folders in Microsoft Outlook without visiting the Email Summary page.

Folder-move preferences are registered below:

Preferences are applied at the sender level and are treated the same as preferences set via the Email Summary page or the Phish Alert Button (PAB). Registering a graymail preference for a sender clears any existing spam preference for that sender, and registering a spam preference clears any existing graymail preference.

Recommended Default Settings

The recommended default settings are displayed below:

Threat Notification

Auto-Remediation

Productivity Management

Operation Mode