Whitelisting
This section explains whitelisting and the steps needed to use the platform effectively. To ensure phishing simulation emails or training enrollments reach users' inboxes without being blocked, whitelist the phishing simulation IP addresses and phishing simulation domains on your server and security solutions.
It’s strongly recommended to send a test email to a small user group to confirm successful whitelisting.
Phishing Simulation IP Addresses for Whitelisting
All clients must whitelist the IP addresses listed below in their email server and security solutions.
149.72.161.59
149.72.42.201
149.72.154.87
If you use Direct Email Creation, whitelisting isn’t required.
Phishing Simulation Domains for Whitelisting
We strongly recommend whitelisting phishing simulation domains in your email server and security solutions to enhance the effectiveness of your phishing simulation program. Phishing simulation domains vary based on customer location, language, and license type.
To find the phishing domains specific to your organization and whitelist them, please navigate to Phishing Simulator > Settings
Shortcuts
The shortcuts below will show you how to whitelist phishing simulation IP addresses and phishing simulation domains with the most commonly used email services.
FAQ
Q: Can I use Phishing Simulation on Office 365 without using Whitelisting?
A: Yes, you can. Our Direct Email Creation (DEC) feature enables you to send simulated phishing emails directly to users' inboxes, eliminating the need for Whitelisting. Discover how to leverage the DEC feature here.
Q: Does whitelisting create a security weakness?
A: Whitelisted IP addresses or PTR Domains are owned by the platform, and only authorized admins are able to send emails to selected target users. Therefore, it does not create a security weakness for the organization.
Q: Can I run training assignments or phishing tests without whitelisting?
A: Yes, you can, but it is definitely not recommended. If whitelisting is not properly done, there may be delivery difficulties. The best practice is to whitelist the platform IPs or PTR Domains before using the product.
Last updated