Office 365

This document will cover all aspects of whitelisting in Office 365 to allow our simulated phishing emails through.

Estimated time for completion is 15 minutes.

Step 1

Log into your Office 365 portal and go into the Admin-->Exchange area.

Step 2

Click on Service Settings --> Mail OR click on Admin --> Exchange.

Step 3

Click on Connection Filter (beneath Protection heading).

Step 4

Click on Connection Filter, then click the Pencil icon to edit the default connection filter policy.

Step 5

Under the IP Allow list, click the + sign to add an IP address.

Step 6

On the "Add allowed IP address" screen, add the following IP addresses:

• 178.17.44.156   
• 178.17.44.157  
• 178.17.44.158  
• 109.108.147.96 
• 109.108.147.136 

Step 7

Click OK, then Save. Any email now sent from any of these IP's will be allowed through Office 365 Exchange.

Bypassing Junk in Office 365

Step 1
Log into your Office 365 portal and go into the Admin>Exchange area.

Step 2

Click on the mail flow section and then click the big + sign in the right hand area and select “Bypass Spam Filtering…” from the drop-down.

This will open the New Rule screen.

Step 3

Creating the Rule

• Give the rule a name, such as "SATT Junk Bypass".
• Select “Apply this rule if…” then choose “Sender's IP address is in the range...”
• In the box produced, enter the following IP addresses:

• 178.17.44.156   
• 178.17.44.157  
• 178.17.44.158  
• 109.108.147.96 
• 109.108.147.136 

• Once they are added, save and close the rule.

Step 4:

• Beneath "Do the following", click "Modify the message properties" then "Set a Message Header"

Modifying the message properties:

Step 6:

Set the message header to this value:
Set the message header "X-MS-Exchange-Organization-BypassClutter" to the value "true".

NOTE: Both "X-MS-Exchange-Organization-BypassClutter" and "true" are case sensitive.

Set the message header value:

Step 7:

Add an additional action beneath "Do the following" to "Modify the message properties". Here, click on "Set the spam confidence level (SCL) to..." and select "Bypass Spam Filtering". 

Bypass Spam Filtering

Step 8:

Click Save. An example of the completed rule is below.

Completed Mail Flow Rule (Include all 7 IP's)