When navigating to the test phish site, it moved the security settings from Internet zone to Trusted zone as Symantec is listed there. That is really bad because even though java is disabled in ie's internet zone, settings are different for the list of trusted web sites.