Whitelisting
This section provides a brief description of whitelisting and the steps required to use the platform effectively.
A whitelist is an inventory of approved sources, such as IP addresses, email addresses, and applications, that are considered safe and have been granted unrestricted access to a system.
Platform IP addresses or PTR domains must be whitelisted with your server and security solutions to allow the simulated phishing emails, training, and other emails sent via the platform to reach users' inboxes without being blocked by any filters.
It is strongly advised that you send a test email to a group of users to ensure that the whitelisting is successful.
Please remember that you should follow the same procedure if you use any email security solution.
IP Addresses and Domains to Allow
All clients must whitelist the IP address or PTR domains listed below with their email server and security solutions.
| SMTP IP Address | SMTP PTR Record |
|---|---|
149.72.161.59 | o1.ptr4777.keepnetlabs.com |
149.72.42.201 | o2.ptr4175.keepnetlabs.com |
149.72.154.87 | o3.ptr8903.keepnetlabs.com |
The instructions below will show you how to whitelist addresses with the most commonly used email services.
Shortcuts
Why does "X" appear on Microsoft Emails in Outlook App?
FAQ
Q: Can I use Phishing Simulation on Office 365 without using Whitelisting?
A: Yes, you can. Our Direct Email Creation (DEC) feature enables you to send simulated phishing emails directly to users' inboxes, eliminating the need for Whitelisting. Discover how to leverage the DEC feature here.
Q: Does whitelisting create a security weakness?
A: Whitelisted IP addresses or PTR Domains are owned by the platform, and only authorized admins are able to send emails to selected target users. Therefore, it does not create a security weakness for the organization.
Q: Can I run training assignments or phishing tests without whitelisting?
A: Yes, you can, but it is definitely not recommended. If whitelisting is not properly done, there may be delivery difficulties. The best practice is to whitelist the platform IPs or PTR Domains before using the product.
Last updated