Skip to main content

​
Start date

The start date is the day the planner begins scheduling emails for the period ahead. It starts scheduling simulations for the next day, within office hours. Announcing the campaign to your colleagues before that date? See Start campaign & reporting.
If you start a campaign late in the month, later than roughly the twentieth, everyone will still receive a mail that month. That can be inconvenient. In that case it is better to start the following month.

​
Phishing frequency

The last step is Phishing frequency, found on the Campaign settings tab. It controls how many emails are scheduled within the timeframe you choose, expressed as a maximum number of emails per period. Your frequency setting also becomes the default clustering in your dashboard, so it affects how your results are grouped as well as how mail is sent.

​
Exclude keywords

Keywords filter out phishing simulations that contain particular words. Add them under Settings then Campaign, pressing Enter after each keyword. Matching covers the whole email, both the subject line and the body. Use it to avoid simulations on topics that would be confusing or sensitive in your organisation.

​
Exclude attachments

The same tab controls whether simulations with attachments are sent. Disable attachments to exclude every simulation that carries one from your campaign.
Only disable attachments when you cannot whitelist them in your environment. It keeps simulations delivering, but removes a common phishing tactic from your results. See Whitelisting first.

​
Active phishing domains

Simulations are sent from a pool of phishing domains. Under Settings then Campaign you can activate and deactivate the individual domains used in your simulations. We regularly add new domains, and it is worth including these in your setup, because they make simulations more realistic and effective. Rotating domains also makes it less likely that users learn to recognise and ignore our domains, and trains them to look at signals beyond the sender address.
1

Whitelist the new domains

Add them in your environment. See Whitelisting.
2

Activate them

Turn them on in the domain list on this tab.
3

Test

Send a whitelisting test under Emails then Tests.

​
Refreshing the whitelisting header

If you use the whitelisting by header option, refresh the header value periodically. This improves security by reducing the risk of unauthorised access through a header value that may have been compromised. Click New to generate a new value, then update it in your mail environment. See Whitelisting by header.
Generate the new value and update your mail environment in the same sitting. Between those two actions, simulations may be filtered.
If you change any setting, click Save Changes at the bottom of the page.

​
Next

That completes onboarding. Your campaign now runs on its own. Within a few days, results start appearing in the dashboard.