Allowlisting - Check Point Harmony

If you're using Check Point Harmony, you should allowlist CanIPhish inside Check Point to ensure all CanIPhish simulated phishing emails and training notifications land in their intended recipients inbox.

Please follow the steps outlined below to implement this allowlist.

Table of Contents:

• Step 1. Setup An Anti-Phishing Exception
• Step 2. Setup Click-Time Protection Exceptions
• Step 3. Setup URL Reputation Exceptions

Step 1. Setup An Anti-Phishing Exception

1. While logged into the Check Point Harmony admin portal, go to Security Settings > Exceptions > Anti-Phishing.
2. In the drop-down form the top of the page, select the require exception type (Allow-List).
3. In the Filters section, define the criteria for filtering emails by clicking Search.

4. When refining the criteria for allowlisting emails, choose the Server IP filter, and then enter the following IP addresses:

   3.106.21.22
   13.237.47.221

5. One complete, click Create Allow-List Rule.
6. If required, enter a description for the rule in the Comment field and click OK.

Step 2. Setup Click-Time Protection Exceptions

1. While logged into the Check Point Harmony admin portal, go to Security Settings > Exceptions > Click-Time.
2. From the drop-down in the top, select the Allow-List exception type.
3. Click Create Allow-List.

4. Repeat the steps below for each of the following domains:

   *.authwebmail.com
   *.cmail31.com
   *.securesupportcloud.com
   *.webnotifications.net
   *.alerting-services.com
   *.onlineverify.net
   *.verificationweb.net
   *.portal-login.net
   *.cloud-notification-services.com
   *.authenticationsecure.com

5. In the Domain field, enter the required domain
6. In the List Name drop-down, select the Allow-List exception type.
7. Click OK and then repeat for each domain.

Step 3. Setup URL Reputation Exceptions

1. While logged into the Check Point Harmony admin portal, go to Security Settings > Exceptions >  URL Reputation.
2. From the drop-down in the top, select the Allow-List exception type.

3. Repeat the steps below for each of the following domains:

   *.authwebmail.com
   *.cmail31.com
   *.securesupportcloud.com
   *.webnotifications.net
   *.alerting-services.com
   *.onlineverify.net
   *.verificationweb.net
   *.portal-login.net
   *.cloud-notification-services.com
   *.authenticationsecure.com

4. In the Domain field, enter the required domain
5. Click OK and then repeat for each domain.

You're all done! If you run into any issues, please contact the CanIPhish support team.