How Do I Safelist a Domain That I Am Testing (Office 365)?
Go to security.microsoft.com and login to your account. Be advised that administrator permissions will be required.
In the left-hand menu click on Threat Management, then select Policy from the drop-down.
On the Threat Policies page, under the Rules heading, click Advanced Delivery.
On the Advanced Delivery page you will see two tabs, the Spec Ops tab and the Phishing Simulation tab. Click on Phishing Simulation.
On the Phishing Simulation page beneath the heading, click "Edit".
In the side window titled Edit third party phishing simulations, click on the Domain drop-down. Add your domain in the field that is provided. The domain(s) you add here will be the phishing domain(s) you use in your templates. You may add up to 20 domains.
Once all domains are entered, select the Sending IP drop-down. In the field that appears, enter 18.104.22.168 (US) or 22.214.171.124(EU).
If Safe Links is used in your tenant, you'll need to configure Simulation URLs to allow. Click this drop-down and enter each domain you plan to test with in this format: example.com/*
Finally, click "Save".
NOTE: If Office 365 is not your mail solution, please refer to the Safelisting section of our user guide.
Please sign in to leave a comment.