At Risk Users Report
The At Risk Users report lists users who are most at risk.
Go to Reports > Email Security > At risk users.
This report uses information from the Time of Click URL Protection and Impersonation Protection features. See Impersonation Protection and VIP Management.
If you have domains connected with Sophos Gateway and Sophos Mailflow, click Type to select which one to view.
By default, the report shows data for the last 30 days. You can select a date range of up to 30 days. If you have a Sophos Email Plus license, you can select a date range of up to 90 days.
Interactive reporting
At Risk Users uses interactive reporting.
You can access At Risk Users from the Time of Click Summary report by clicking a number in Clicks Warned or Clicks Blocked. The selected category and time period are applied in At Risk Users.
In At Risk Users, you can click a number in Risk index to go to the At Risk Users report for that user. You can then click a subject line to see more details about the threat.
Phish Threat
The report includes direct links to Phish Threat training for high-risk users. The Phish Threat campaign wizard automatically includes the at-risk users for the date range you have selected. You can also add and remove users manually. See Create a campaign.
Schedule a report
You can schedule regular At Risk Users reports to be sent via email to selected admins.
For information on scheduling a report, see Schedule reports.