Transcript
Self-Service Portal for your end-users. We have a separate Techvid showing end-users how to reach and use the portal to manage their emails, so refer to that if needed. The video is linked in the description. Let's dive in. The Sofo Central Self-Service Portal, or SSP, is a web interface that enables end-users to manage daily tasks that normally require a network administrator. Depending on the access level you set as the admin, users can take actions related to email management, mobile device enrollment, and device encryption, freeing up your time for more important tasks. Today you'll learn how to grant end-users access to the Self-Service Portal and configure the features they can use. And lastly, you'll learn how to configure smart banners, which work hand-in-hand with the Allow Block List feature of the SSP. Before starting, you need a Sofos email license. In addition, ensure that end-users access the portal using one of the supported browsers. Refer to the linked documentation for more details. Let's get started. In Sofo Central, go to My Environment, Users and Groups. Select the relevant users, then click Email Setup Link. Tick the box for the Self-Service Portal welcome email, and then Save. The selected end-users will receive this email with instructions to create a password and sign in to the portal. If desired, you can also automatically give users access to the Self-Service Portal when they're added to Sofos Central. To do this, go to My Products, Email Security, Settings. Under Access Control, go to Sign-in and Identity, and open the Sofos Sign-in tab. Enable the Self-Service Portal access option. Accept the acknowledgement, then click Continue. And don't forget to save the changes. Note that disabling this option doesn't stop existing users from accessing the SSP. Next, configure the email management features your users can access. Go to My Products, Email Security, Settings. Under Products and Services, open the email drop-down and click User Settings. This shows all features you can enable for your end-users. Note that some of these features depend on your license, so you may not see all of them in your environment. I'll briefly explain each one. Enable Quarantine Summary Format to enhance the readability and the viewability of the Quarantine Summary, which is especially useful when viewing on smaller screens and mobile devices. Enable the Emergency Inbox to allow users to access their messages from the Self-Service Portal in the event of an email server outage. Depending on your license, users can only view messages from the last 30 or 90 days. Checking Redelivery of Emails gives end-users the added ability to resend messages from their Emergency Inbox. By default, users can always view quarantined messages. Enable Release or Delete to let them take action on those messages through the Quarantine Summary or SSP. Flagged messages can be released into the Inbox or deleted. You can further augment this if you enable the Allow or Block List. Users can then allow and block email addresses in domains as needed. This feature works together with Smart Banners, which are configured in the Sophos email-based policy, and I'll cover this later. By default, emails quarantined by Microsoft 365 must be managed in the Microsoft Portal. Enabling Allow Release of M365 Quarantine Emails lets users release those emails directly from the Portal, giving them a single place to manage both Sophos and Microsoft Quarantined Messages. For more information about the Release, Delete, and Allow Block List options, refer to the linked documentation. Next, enable Prevention of Spoofing of Allowed Address to ensure that allowed senders are only trusted if their identity passes one or more authentication scans. Normally, trusted senders bypass certain scans, which poses a potential risk. Subsequently, choose Perform SPF Check for Non-Aligned Address to allow Sophos email to perform SPF checks even when the sender's domain doesn't match the visible email address. Generally, we recommend that you leave this disabled, as this can pose a risk since a spoofed email may still pass SPF using a different sending domain. In cases where you need to enable this, for better protection, we recommend you also enable SPF checks for the envelope domain. Lastly, turn on Copy of Reported Messages to receive a copy of any messages reported to Sophos Labs for analysis by users and admins. You can select multiple mailboxes or distribution lists to receive these copies. When you're finished configuring the features, remember to save the changes. Lastly, I'll show you how to configure smart banners, which are visual indicators added to inbound emails to help users quickly identify potential risks. They're applied as part of the email filtering process and are not part of the self-service portal settings. However, when enabled along with the portal's Allow Block Lists feature, it gives users the options directly in the email to allow or block the sender or report a suspicious message. Smart banners are configured within the email security policies in Sophos Central. Go to My Products, Email Security, Policies, then open the email security base policy. Click Settings, then scroll down to End User Message Settings and configure this as needed. To learn more about smart banners, refer to the relevant resources linked in the description. And that covers the steps for enabling and configuring the Sophos Central self- service portal for your end users. I hope you found this useful. The relevant documentation and other comprehensive resources for this tech vid are linked in the video description. Join the Sophos community to stay up-to-date with our products, ask questions, and get answers from Sophos experts. And go to Sophos TechVids for more expert tutorials to help you maximize your products and stay secure. See you next time.
