In order to be effective, training and testing should continue throughout the year. With regular phishing simulations, your users will be primed to always stay on the lookout for suspicious emails in their inboxes.

In this article, you'll learn:

In the top menu, hover over uPhish and click Configure Auto Phish

Toggle the 'Enable Auto Phish' button at the top of the page.

You will need to choose the frequency of the automated simulation emails, as well as whether they send during working hours.

You can exclude user groups at this stage to prevent them from getting automated phishing emails.

You can use this box to select which domains you'd like to be used by your automated phishing simulations - or leave it empty to allow any uPhish domain to be used.

You can choose to restrict templates to ones available in your Preferred Content Language (you can set this in your Language settings). You can also choose to add any languages you wish to be used for Auto Phish in the selection box.

NOTE: If you enable the Restrict Templates to your Preferred Content Languages(s) setting or choose one or more Preferred Template Language(s), only templates that match your chosen languages will be selected for your Auto Phish simulations, even if you include templates from other languages with template filtering.

uPhish contains a large library of phishing templates. For Auto Phish, you can pick and choose which you want to include - or just exclude the ones you don't want.

NOTE: Templates you choose to allow will only be selected for your simulations if they match your language settings. Please ensure that any templates you wish to use are in line with the language settings in the previous step.

You will want to ensure that only templates that your users will recognise are used in your automated phishing simulations. If templates are from another region or in another language, they won't accurately engage how likely your end users are to engage in realistic phishing attempts.

On the Auto Phish page, you can choose which templates are included in your automated simulations by selecting to either include or exclude a list of templates.

If you want to include only your chosen templates:

If you want to exclude certain templates:

There are a wide variety of domains available in uPhish. Selecting the right domains to be used in your automated phishing simulations will help ensure that simulations are effective, as you will for example be able to rule out regional domains that are not applicable to your end users.

Selecting domains to be used by Auto Phish is also essential if you use Advanced Delivery (the preferred allow-listing method in M365) as Advanced Delivery limits your allow-listing to 20 domains. You should ensure the 20 domains set up in Advanced Delivery match the 20 domains you choose in Auto Phish.

To select domains to be used by Auto Phish:

Users who become compromised in their phishing simulations require extra training to ensure that they know how to keep themselves and your company's data safe in the future.

You can easily configure automatic inline training to users who become compromised in Auto Phish simulations at the bottom of the Auto Phish configuration page.

Simply select the subject of the course you wish to enrol users on, and pick out your selected course from the list below before saving your settings.