Allowlisting - Mimecast Email Security Cloud Integrated

Mimecast's Email Security Cloud Integrated product uses a Graph API integration to protect Microsoft 365 environments. To allowlist CanIPhish simulated phishing emails and security awareness training notifications, you'll need to follow the steps outlined below.

Table of Contents:

1. Creating A Sender-Based Allowlisting Rule
2. Creating A URL-Based Allowlisting Rule
3. Allowlisting In Microsoft 365

1. Creating A Sender-Based Allowlisting Rule

1.1. Select the menu item
1.2 Navigate to Configuration | Allow/Block Rules.

1.3. Select the Sender tab.

1.4. Click Add Rule.

1.5. Select the action Allow.
1.6. Enter the following domains in the Envelope input, delimiting each with a comma

Note: If you've white-labeled CanIPhish, replace learn.caniphish.com with the learner portion of your white-labeled domain (e.g. learn.phish.mybusiness.com)

alerting-services.com
authwebmail.com
cloud-notification-services.com
securesupportcloud.com
office-365-notifications.com
webnotifications.net
paypaypal.net
cmail31.com
authenticationsecure.com
verificationweb.net
onlineverify.net
portal-login.net
email-forwarder.net
learn.caniphish.com

1.7. Use the Reason drop-down to select the Safe/Clean option.
1.8. Leave the alerting option as disabled (default)

2. Creating A URL-Based Allowlisting Rule

2.1. Select the menu item
2.2. Navigate to Configuration | Allow/Block Rules.

2.3. Select the URLs tab.

2.4. Click Add Rule.

2.5. Select the action Allow.
2.6. Disable the Rewrite URL toggle switch.
2.7. Enter the following URLs, delimiting each with a comma:

authwebmail.com
cmail31.com
securesupportcloud.com
webnotifications.net
alerting-services.com

2.8. Use the Reason drop-down to select the Safe/Clean option.
2.9. Click Save.

3. Allowlisting In Microsoft 365

Even with allowlisting within Mimecast's Email Security Cloud Integrated product, Microsoft will still analyze inbound emails to determine if they contain phishing material. Because of this, you still need to allowlist CanIPhish within Microsoft 365. Please follow our Microsoft 365 Allowlisting Guidance to get started. If you run into any issues, please contact the CanIPhish team for support.