Sophos Web Protection Allowlist

If you're using Sophos Endpoint Protection with Web Protection enabled you may experience issues with Sophos blocking our simulated phishing websites. To get around this issue, please follow the below allowlisting steps.

1. Traverse to your Sophos UTM Administration Panel.
2. On the Web Protection > Filtering Options > Websites tab you can maintain lists of sites for which you want to override the default category, reputation, or associate a tag with the site.
3. To add an entry to the Local Site List click the Add Site button.
4. Enter all CanIPhish phishing website domains:

   authwebmail.com
   cmail31.com
   securesupportcloud.com
   webnotifications.net
   alerting-services.com
   onlineverify.net
   verificationweb.net
   portal-login.net
   cloud-notification-services.com
   authenticationsecure.com

5. Select the Include subdomains checkbox.
6. Select to override both Category and Reputation filters.
7. Select a Tag to associate with the allowlisted sites or specify a custom tag (e.g. "CanIPhish Simulated Phishing Websites").
8. Optionally, add a comment.

You're all done! If you run into any issues, please don't hesitate to contact the CanIPhish support team.