To ensure that Infosec IQ services are accessible and working properly for your Learners and that PhishSim and AwareEd emails are arriving in their mailboxes successfully, it’s important to exempt Infosec IQ from your security services, whatever they may be.
There are a few places that can potentially interfere with Infosec IQ services, that you should configure and test before launching your campaigns.
Mail Providers
Depending on your mail provider, what exactly needs to be allowlisted will be slightly different. But generally speaking, you’ll want to bypass any spam filtering, bypass link inspection and rewriting, and bypass attachment scanning.
If your MX record is pointed directly at your mail provider, it’s best to allowlist either by IP address or mail server, both of which can be found on the Account Settings page in Infosec IQ. If your MX record points to an email filtering service first, and is then passed to your mail provider, it’s best to allowlist by our header, which can be also be found on the Account Settings page in Infosec IQ.
Below are specific instructions for some common mail providers:
- Allowlisting in Microsoft / Office 365
- Allowlisting in Google Workspace
- Allowlisting in Exchange 2013/2016
Email Filtering Services
Depending on your email filtering service, what exactly needs to be allowlisted will be slightly different. But generally speaking, it will be similar to allowlisting for a mail provider- you’ll want to bypass any spam filtering, bypass link inspection and rewriting, and bypass attachment scanning.
It’s best to allowlist in email filtering services either by IP address or mail server, both of which can be found on the Account Settings page in Infosec IQ.
Below are specific instructions for some common email filtering services:
- Allowlisting in Mimecast
- Allowlisting in Proofpoint
- Allowlisting in Barracuda
- Allowlisting in Trend Micro
- Allowlisting in Cisco IronPort ESA
Web Filtering Services
Depending on your web filtering service or firewall, what exactly needs to be allowlisted will be slightly different. But generally speaking, you’ll likely need to allow for particular phishy domains that you decided to use in your campaign or request a list of all of Infosec’s phishy domains and import a comprehensive list. For assistance with this, click on the ‘?’ icon in the bottom right corner of any page in Infosec IQ, to create a support ticket with our Customer Support Team.
Below are specific instructions for some common email filtering services: