“I think it's stronger than most folks give it credit because the alternatives are either double the price or using incredibly outdated material. The key is that you really want to ingrain into your users that they should be using the phish alert button frequently and to be able to identify the difference between spam and phishing.”
“Knowbe4 is a really good company for training and monitoring "user errors" of security and safety. :) Three are also a number of open source training programs that can help, like GoPhish.”
“I did the training anyways just in case it's required by my company but now I'm worried I'm going to get an email telling me I fell for it and I am an idiot.”
“So in my testing doing 1) Whitelist by IP + 2) KB4’s recommended Inbound Gateway rule + 3) Disable Return Path header KnowBe4 Account setting; resolves all the banners. If you’re spoofing your own domain, you may also have to add KnowBe4s servers to your spf records.”
“We have been running KnowBe4 for a while now and have significantly reduced our phish prone percentage, but cannot imagine a case where its 100%. In all fairness, we have numerous users who are not savvy computer users and pretty much live on mobile devices only.”
“That being said KnowBe4 isn't a bad product if security budget has some money to be burned. However, if you are limited in budget, I'd spend it on different security products like better spam filter or upgrade to current one of have sandbox scanning.”