Whitelisting tutorial for phishing simulations

If you launched a Cyber Guardian phishing simulation reception test and it is not received at least 1 hour after sending, our advice is to exempt the sending IP on your mail server. In this article we'll give you guidelines on how to do it depending on what your email server is.

1. Google Workspace (formerly G Suite) 

1. Access Admin Console: https://admin.google.com 
2. Go to: Apps > Google Workspace > Gmail > spam, phishing, and malware 
3. In the Email allowlist section, click "Edit". 
4. Enter the desired IP (167.71.11.130). 
5. Save changes. 

Notes: The change can take up to 1 hour to apply and applies to the entire domain. 

2. Microsoft 365 / Office 365 (Exchange Online) 

Option A: Exchange Admin Center

1. Access: https://admin.exchange.microsoft.com
2. Go to: Mail flow > Rules and create a new rule:
• Name: Whitelist IP
• Condition: "The sender's IP address is in this range" → 167.71.11.130
• Action: "Set the spam confidence level (SCL) to -1"
3. Save and activate the new rule.

Option B: Microsoft Defender (Security & Compliance Center) 

1. Go to: https://security.microsoft.com 
2. Navigate to: Policies & rules > Threat policies > Anti-spam policies 
3. Edit the default policy or create a new one. 
4. In the Connection filter policy, add the IP 167.71.11.130 to the Allow IP list. 

3. Microsoft Exchange Server (hospedado)

Steps in PowerShell:

1. Add IP to IP Allow List:

• Set-IPAllowListEntry -IPAddress 167.71.11.130 -Comment "Trusted supplier"

2. Make sure that Transport Agent is enabled:

• Get-TransportAgent
• Enable-TransportAgent -Identity "Connection Filtering Agent"

3. Restart Transport Services:

• Restart-Service MSExchangeTransport

4. Other (samples)

Proofpoint:

• Go to portal > Email Protection > Inbound Policy
• Add IP at Trusted IP Addresses.

SpamExperts / MXToolbox / Barracuda:

• Search section Sender Allow List o Inbound IP Whitelist.