{"id":18304,"date":"2026-07-27T12:11:05","date_gmt":"2026-07-27T11:11:05","guid":{"rendered":"https:\/\/gatlabs.com\/knowledge\/?post_type=docs&p=18304"},"modified":"2026-07-27T13:03:26","modified_gmt":"2026-07-27T12:03:26","password":"","slug":"anti-phishing-rules-shield-plus","status":"publish","type":"docs","link":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/anti-phishing-rules-shield-plus\/","title":{"rendered":"Set Up Anti-Phishing Rules in Shield+"},"content":{"rendered":"

Phishing attacks evolve faster than central email filters and domain blacklists can keep up. While traditional inbox security stops malicious links before delivery, employees often encounter deceptive links elsewhere, such as personal webmail, instant messaging apps, external documents, or direct browsing.<\/p>\n

Shield+<\/b> acts as an edge defense layer right inside the user\u2019s Chrome browser. By evaluating page context, URL structures, and credential forms locally and in real time, Shield+ can issue user warning banners or enforce read-only restrictions before an employee submits corporate credentials to a fake page.<\/span> Additionally, Google Admins maintain custom domain policies, instantly enforcing hard blocks on known malicious sites or whitelisting trusted partner platforms to avoid unnecessary security alerts.<\/p>\n

Below is the guide to creating anti-phishing rules, handling detector responses, reviewing security alerts, and managing domain lists.<\/p>\n

D<\/b>efine and create anti-phishing rules<\/h2>\n

Navigate to\u00a0Shield+ > Security configuration > Anti-Phishing > Rules > New anti-phishing rule<\/strong><\/p>\n

\"Navigate<\/p>\n

Click on New anti-phishing rule<\/strong> to create a rule.<\/p>\n