Skip to content
  • There are no suggestions because the search field is empty.

Set up ExecProtect

What is ExecProtect?

ExecProtect stops display name spoofing: emails that pretend to come from someone in your organization, like your CEO or your help desk, but are sent from an outside address. ExecProtect places these emails in quarantine before they reach the person being targeted.

How ExecProtect works

ExecProtect checks the display name on every inbound email against your list of protected names and their variations. If the display name matches, ExecProtect checks whether the sender's email address is one of the approved sending addresses for that name.

  • If the address is approved, the email is delivered.
  • If the address isn't approved, the email is quarantined with the category ExecProtect, and everyone who receives ExecProtect notifications gets an alert.

Important: An Allow From rule turns ExecProtect off for the senders it matches. For example, if you have an Allow From rule for *@gmail.com, ExecProtect won't check any email from a Gmail address. Allow rules you create from the quarantine with Release & allow email(s) or Release & allow domain(s) work the same way. To trust a specific person who uses a protected name, add their address as an approved sending address in ExecProtect instead of creating an Allow From rule.

How to add a protected display name

  1. Log in to your Paubox dashboard.
  2. Go to Inbound Security > ExecProtect.
  3. Click Add.
  4. In Display Name to Protect, enter the name, keyword or phrase you want to protect (for example, Robert Smith or HelpDesk).
  5. In Protected Display Name Variations, add any other names this person or team goes by, one per line (for example, Bob Smith). Don't use initials.
  6. Under Choose Mail Domains, select the domains ExecProtect should protect for this name, or click Select All Domains.
  7. In Approved Sending Addresses, add every address that is allowed to send using this name, one per line. Include work addresses and any personal addresses the person really uses. You can use * as a wildcard, for example *@yourdomain.com.
  8. Click  Save.

 

Tip: Domains you add to your account later aren't added to existing rulesets automatically. Edit the ruleset to include them.

To change or remove a protected name, click it in the list, then click Edit Ruleset or Delete.

How to receive ExecProtect alerts

ExecProtect alerts go to every user who has the ExecProtect Notifications permission. An admin can turn it on for any user:

  1. Go to Users.
  2. Click the user's name.
  3. Under Permissions, add ExecProtect Notifications.
  4. Click Update User.

To stop someone's alerts, remove the permission the same way.

Learn more