profile cousin-domain

Use this command to mitigate business email compromise (BEC) email-impersonation risks. Domain names may be deliberately misspelled, either by character removal, substitution, and/or transposition, in order to make emails look as though they originate from trusted internal sources.

Configure cousin domains to define those domain names that should be subjected to cousin domain scanning and those domains that are exempt from scanning.

Once created, cousin domain profiles can be referenced in antispam profiles. In addition, you can set cousin-domain-scan-option {auto-detection body-detection header-detection}.

Syntax

config profile cousin-domain

edit <profile_name>

config entry

edit <rule_int>

set domain-name-type {wildcard | regex}

set domain-name <domain_str>

next

end

config exempt

edit <rule_int>

set domain-name-type {wildcard | regex}

set domain-name <domain_str>

next

end

end

Variable	Description	Default
<profile_name>	Enter the name of the profile.
<rule_int>	Enter the identifying number of the rule If the rule does not currently exist, it will be created.
domain-name <domain_str>	Enter the domain name, either as a wildcard or regular expression.
domain-name-type {wildcard | regex}	Select the type of the domain name pattern.	regex