Allowlisting - Introduction

Allowlisting CanIPhish in your Email Platform

Allowlisting - Quick Reference - IPs, Headers & URLs

Multiple allowlisting methods are listed below. Choose the method that best suits your organisation - preferred methods have been tagged.

Microsoft/Office 365

• Allowlisting - Use M365 Defender to allow a Phishing Simulation (PREFERRED)
• M365 Direct Email Injection (API Integration To Bypass Allowlisting)
• Supplemental Allowlisting Guides (Optional):
  • Allowlisting - Bypass Safe Link/Attachment Processing of M365 Advanced Threat Protection (ATP)
  • Disabling Microsoft/Office 365 "Report as Phishing" to Avoid False Reports within Outlook Web

     Microsoft Exchange Server

• Allowlisting - By IP Address in Exchange 2013 or 2016
• Allowlisting - By Email Headers in Exchange 2013 or 2016
• Allowlisting - By Email Headers in Exchange 2010

Google Workspace

• Allowlisting by IP Address in Google Workspace (PREFERRED)
• Google Workspace Direct Email Injection (API Integration To Bypass Allowlisting)

Allowlisting CanIPhish in your Secure Email Gateway

If your organisation invests in additional email filtering technologies (e.g. Proofpoint, Sophos, Cisco Ironport, etc.) then you will need to add allowlisting rules to prevent CanIPhish emails from being classified as spam or phishing.

If you utilise a secure email gateway outside what's listed below, please contact us.

• Allowlisting - Mimecast
• Allowlisting - Proofpoint
• Allowlisting - Sophos Products
• Allowlisting - Symantec MessageLabs/Cloud
• Allowlisting - Barracuda
• Allowlisting - Cisco Ironport
• Allowlisting - Spam Titan
• Allowlisting - AppRiver
• Allowlisting - Avanan
• Allowlisting - SpamHero
• Allowlisting - MPmail

Troubleshooting

Having trouble with allowlisting? Please contact the team at CanIPhish for support. In some cases, endpoint protection software may quarantine emails. In other cases. if you have multiple email security solutions (e.g. Barracuda Email Security infront of M365, you may need to list Barracuda IPs instead of CanIPhish IPs for allowlisting). To ensure everything is done correctly, our support team will lend a helping hand.

Advise CanIPhish that you've setup Email Allowlisting

Once Email Allowlisting has been setup, please go to the Campaigns page and turn off the email allowlisting notification.