Allowlisting - Bitdefender Email Security

If you're using Bitdefender Email Security, you should allowlist CanIPhish's simulated phishing emails and training notifications. This article will guide you on how to add CanIPhish's IP Addresses to Bitdefender's allowlist.

Table of Contents

• Bitdefender Email Allowlisting Steps
• Appendix A: Bitdefender with Microsoft 365

Note: This allowlisting guide is based on Bitdefender's allowlisting guidance.

Bitdefender Email Allowlisting Steps

1. Within the Bitdefender Control Panel, go to Products > Spam Safe List.
2. In the Select Mailbox dropdown, select Global.
3. In the Search List input, enter the following CanIPhish Mail Server IP addresses one by one (1 IP Address per Entry):
   

   3.106.21.22
   13.237.47.221

4. Click Add. Repeat Steps 2-4 for both of the IP Addresses listed both.

Appendix A: Bitdefender with Microsoft 365

Due to the nature of how Microsoft 365 email security works, you will need to implement additional allowlisting within Microsoft 365 to guarantee email delivery. There are two options available:

Option 1. Microsoft 365 Direct Email Injection

This approach bypasses the need for traditional email allowlisting, as email are directly inserted into users inboxes via the Microsoft Graph API. This approach bypasses the need for you to allowlist within Bitdefender.

Option 2. Microsoft 365 Phishing Simulation Allowlisting

This approach follows standard Microsoft 365 Phishing Simulation allowlisting guidance.
Note: If you experience difficulties with this approach it could be due to how Bitdefender email security is setup. For example, if Bitdefender is configured as an email proxy, where by it receives emails, and then forwards them to Microsoft, it will interfere with this allowlisting approach as the source IP of simulated phishing emails gets overriden (i.e. Microsoft can't see that the email originated from CanIPhish). If this is the case, we recommend proceeding with Option 1.