Whitelisting for third-party phishing simulations (Microsoft 365)

With the advanced delivery policy for phishing simulations in Microsoft 365 Defender, it is possible to whitelist Guardey. This article provides step-by-step instructions for configuring advanced delivery.

Step 1

Log in to your mail server’s portal as an administrator and click on Security.

Step 2

Go to Policies & Rules (2a) and select Threat Policy (2b).

Step 3

In the Rules section, click on Advanced Delivery.

Step 4

On the Advanced Delivery page, select the Phishing Simulation tab (4a) and click on Edit (4b).

Step 5

In the Edit Third-Party Phishing Simulations window that opens, you can enter the whitelisting information using the dropdown menu.

Step 6

In the field Sending Domain (x items), enter the domains of the technical senders. The sending domain is the part that comes after the @ in the email address, for example, name@example.com. – 

Step 7

In the field Sending IP Address (x items), enter our IPv4 addresses. – Ask your contact for the correct sending IP addresses for the spear phishing campaign or check here for the IP addresses and domains of the phishing module in the portal.

Step 8

In the field Simulation URLs to allow (x items), enter the domains/URLs used in the phishing links. Use the following format: ~example.com~. Then click on Save.