I have impersonation protection enabled and lots of names, this works perfectly stopping most if not all impersonation emails. We do get a couple false but I can live with that. However recently I'm seeing a new trend (at least to me) that they are sending phisinh emails and putting in the subject line a name of a Senior person or owner thus the email makes it past our Impersonation policy. Is there anyway that I can create a policy that will look at the subject and allow me to add various keywords for an Admin hold?
