Microsoft Office 365 Defender Basic/Advanced

This article will cover how to whitelist Curricula’s training email and phishing simulator email servers in Microsoft 365 Defender.

Step 1. Basic Whitelist

Sign in to Microsoft 365 Defender portal

  1. Scroll down and select Email & collaboration
  2. Select Policies & rules
  3. Select Threat policies in the list

Step 123

  4.  Under Policies, Select Anti-spam

Step 4

  5.  Select Anti-spam inbound policy (Default)

  6.  Scroll down to Allowed And Blocked Senders and domains to Select Edit allowed and blocked senders and domains in the fly-out

Step 5 6

  7.  In the fly-out under Allowed, select Allowed domains

Step 7


  8.  Click the Add Domains + button to add the following domains one at a time and press Enter/Return to add them to the list.


  9.  When finished select the Add domains button

89


  10.  Select Done

  11.  Click Save


You have now completed Basic whitelisting of Curricula’s domains. To whitelist our Phishing Simulation Servers and Domains follow Step 2 to bypass Microsofts Advanced Filtering that is not bypassed in Step 1. This includes :

  • Content Filtering
  • High confidence spam
  • High confidence phishing email

 

Step 2. Advanced Phishing Simulator Whitelist

Sign in to Microsoft 365 Defender portal

  1. Scroll down and select Email & collaboration
  2. Select Policies & rules
  3. Select Threat policies in the list

Screen Shot 2022-03-05 at 12.08.04 PM

 

  4.  Scroll down to the Rules section and select Advanced delivery

Screen Shot 2022-03-05 at 12.18.21 PM

 

   5.   Select Phishing simulation tab, then select EditScreen Shot 2022-03-05 at 12.50.33 PM

    6.  Under Sending Domain add the following Curricula Domains and Phishing Domains (one at a time then press Enter/Return to confirm the domain)

 7.  Under Sending IP add the following Curricula IP’s
  • 18.205.140.116 (Phishing Server)
  • 168.245.36.66 (Training Server)

 8.   When finished select Save.

 

Now that you are finished whitelisting for your Microsoft 365 account, we recommend a Delivery test via Settings > Phishing > Deliverability test in Curricula. Then send an assignment notification and/or phishing campaign to yourself or a small group of employees to verify the whitelisting was successful before launching Curricula to your staff.

*If you have any messages that get placed in users junk email folders, add all Curricula Phishing domain's to the allowed list described in Step 1. 

If these steps don’t resolve the issue, let us know by submitting a ticket to our support team.

You can contact us anytime by submitting a support request using the link below:

https://support.curricula.com/kb-tickets/new