Whitelisting : Third Party Mail Filtration Services

This article takes you through the steps on how to whitelist Phriendly Phishing IP Addresses and Domains when using Proofpoint. Adding our IP addresses and domains to a global approved senders list ensures that our phishing simulation and training emails are sent through. These instructions were adapted from Proofpoint's article which may be updated after the creation of this article.

This article takes you through:

• Whitelisting in Proofpoint Essentials
• Whitelisting in Proofpoint Enterprise
• Avoiding issues with Proofpoint’s Targeted Attack Protection
• Avoiding Phriendly Phishing Emails from going to SPAM

Whitelisting in Proofpoint Essentials

1. Navigate to Security Settings > Email > Sender Lists.
2. Under the Safe Sender list, enter our IP addresses and domains. See the Phriendly Phishing Generate a whitelist test article for a full list of our IP addresses and domains.
3. Click Save. 

Whitelisting in Proofpoint Enterprise

1. Navigate to your Proofpoint Enterprise Admin console.
2. Click Email Protection.
3. Under the Spam Detection drop-down, select Organizational Safe List.
4. Click Add.
5. In the Proofpoint - Global Safe List window, enter the following information:
6. Filter Type: From the drop-down menu, select Sender Hostname.
7. Operator: From the drop-down menu, select Equals.
8. Value: In the field, enter the IP addresses and domains listed in Step 1 of the Phriendly Phishing Generate a whitelist test article.
9. Click Save Changes.

Avoid Proofpoint’s Targeted Attack Protection

To avoid potential issues with Proofpoint’s Targeted Attack Protection, we suggest that you add Phriendly Phishing's IP addresses and domains to Proofpoint’s URL Defense. To add Phriendly Phishing's IP addresses and domains to Proofpoint's URL Defense, follow the steps below:

1. Navigate to your Proofpoint Essentials Admin console.
2. Click Email Protection.
3. Under the Targeted Attack Protection drop-down, select URL Defense.
4. Click URL Rewrite Policies.
5. Under the Exceptions section, enter the IP addresses and domains listed in Step 1 of the Phriendly Phishing Generate a whitelist test article.
6. Click Save Changes. 

Avoid Phriendly Phishing Emails Going to Spam

If your emails are being sent to spam or are being quarantined, you'll need to add Phriendly Phishing to the Organizational Safe List in Proofpoint.

Follow the instructions below to add Phriendly Phishing's hostnames or IP addresses to the Organizational Safe List:

1. From your Proofpoint admin centre, navigate to Email Protection > Spam Detection > Organizational Safe List.
2. Add either our hostnames or IP addresses. For the most up-to-date list of our IP addresses and hostnames, please see Step 1 of the Phriendly Phishing Generate a whitelist test article.

This article takes you through the steps on how to Whitelist Phriendly Phishing IP Addresses and Domains when using Mimecast. Adding our IP addresses and Domains to a global Approved Senders list ensures that our phishing simulation and training emails are sent through.

Please follow the instructions below to add global approved sender:

To successfully whitelist our phishing and training-related emails when using Mimecast, you should Create a new Permitted Sender policy to allow our phishing and training-related emails through to your users' inbox.

Permitted Senders Policy

1. Log on to your Mimecast Administration Console.
2. Click the Administration toolbar button.
3. Select the Gateway | Policies menu item.
4. Select Permitted Senders from the list of displayed policies.
5. Select the New Policy button (please do not edit your default Permitted Sender policy; a new one must be created)
6. Add Policy Narrative 'Phriendly Phishing Permitted Senders Policy' and select the relevant policy settings under the Options, Emails From, Emails To, and Validity sections. For more information on these settings see Mimecast's Configuring a Permitted Senders Policy article (opens in a new tab). 
7. In the Source IP Ranges field, enter our IP ranges, see Generate a whitelist test – Phriendly Phishing (opens in a new tab).
8. Save the Policy

Attachment Protection Bypass Policy

1. Log on to your Mimecast Administration Console
2. Click the Administration toolbar button.
3. Select the Gateway | Policies menu item.
4. Select Attachment Protection Bypass from the list of displayed policies.
5. Select the New Policy button.
6. Add Policy Narrative 'Phriendly Phishing Simulation Attachment Protection Bypass Policy' and select the relevant policy settings under the Options, Emails From, Emails To, and Validity sections. For more information on these settings, see Mimecast's Configuring Attachment Protection Bypass Policies article (opens in a new tab). 
   In the Source IP Ranges field, enter our IP ranges, please see Generate a whitelist test – Phriendly Phishing (opens in a new tab).
7. Please save the policy. 

URL Protection Bypass Policy

Mimecast's URL Protection service scans and checks links in emails upon delivery. This can lead to false-positive results for your phishing security tests. Follow the steps below to create a URL Protection Bypass policy for accurate phishing simulation reports. 

1. Log on to your Mimecast Administration Console
2. Click the Administration toolbar button.
3. Select the Gateway | Policies menu item.
4. Select URL Protection Bypass from the list of displayed policies.
5. Select the New Policy button.
6. Add Policy Narrative 'Phriendly Phishing Simulation URL Protection Bypass Policy' and select the relevant policy settings under the Options, Emails From, Emails To, and Validity sections. For more information on these settings, see Mimecast's Configuring Attachment Protection Bypass Policies article (opens in a new tab).
7. In the Source IP Ranges field, enter our IP ranges, see Generate a whitelist test – Phriendly Phishing (opens in a new tab).
8. Please save the policy.

This article takes you through the steps on how to Whitelist Phriendly Phishing IP Addresses and Domains when using TrendMicro. Adding our IP addresses and Domains to a global Approved Senders list ensures that our phishing simulation and training emails are sent through.

Please follow the instructions below to add global approved sender:

1. Navigate to the Advanced Threat Protection tab > Add. 
2. Select the policy to create based on the service:
   • Exchange
   • OneDrive
   • SharePoint
   • Box
   • Dropbox
   • Google 
3. On the left, select Advanced Spam Protection
4. Check the Enable Advanced Spam Protection option. 
5. Select the Approved/Blocked Sender List section. 
6. Check the box next to the Enable the approved sender list option. 
7. Enter *@phriendlyphishing.com , as well as our other IP addresses and domains found in Generate a whitelist test – Phriendly Phishing in the text field and click the Add > button. 
8. Select the Rules configuration section.
9. Under the Apply to: drop-down, select the Incoming messages option. 
10. For Detection Level:, select the Medium option.

This article takes you through the steps on how to Whitelist Phriendly Phishing IP Addresses and Domains when using Symantec.cloud. Adding our IP addresses and Domains to a global Approved Senders list ensures that our phishing simulation and training emails are sent through. 

Please follow below instructions to add global approved sender:

• Select Anti-Spam under Services>Email Services.
• Make sure that the domains drop-down list has Global Settings selected.
• Select Approved Senders tab.
• Select "Add Entry" from the menu.
• The fields Description and Domain/Email/IP can now be changed.
• Enter all our IP addresses and Domains in the Domain/Email/IP column. 

This article takes you through the steps on how to Whitelist Phriendly Phishing IP Addresses and Domains when using Fortinet FortiGate. Adding our IP addresses and Domains to a global Approved Senders list ensures that our phishing simulation and training emails are sent through. These instructions were adapted from FortiGate's Static URL Filter article which may be updated after the creation of this article.

Whitelisting by Static URL Filter

You may add our landing and phishing domains to your Fortigate firewall's Static URL Filter list to permit access to them. Web pages that match the specified URLs are permitted by the FortiGate web filter.

1. Navigate to your Fortinet account by logging in.
2. Click Security Profiles > Web Filter.
3. Select an existing web filter to modify or create a new one.
4. When URL Filter is enabled, expand Static URL Filter and choose Create.
5. Go ahead and enter the URLs without the "https". For instance, www.example.com.
6. Fill in every training and phishing domain listed in Phriendly Phishing's IP Addresses, Domains – Phriendly Phishing Copyright © 2024
   Note: Please reach out to Phriendly Phishing Support team to get all phishing domains/ URLs.
7. Select Type: Simple.
8. Select the Action to take against matching URLs: Allow.
9. Ensure status is Enabled.