Add the MA IP address to Microsoft Exchange allowlists

Using Microsoft Exchange®, allowlist the MA program IP address and headers, and any applicable third-party IP addresses that are used during spam filtering. This could be a static IP address or a range of IP addresses that are assigned to you by your third-party provider.

Before you begin

• Complete Step 2: Add MA to email gateway and spam filtering allowlists.
• Obtain the MA IP address to allowlist. To see the complete list of IP addresses that you must allowlist, go to the Arctic Wolf Unified Portal, and then click Help > Allowlist Requirements. The IP addresses that must be allowlisted are listed under Security Awareness Training.
• If applicable, obtain the static IP address or range of IP addresses from your third-party provider.

Steps

1. Allowlist the MA IP address in Microsoft Exchange.
2. Bypass clutter and spam filtering in Microsoft Exchange.
3. (Optional) Enable a bypass spam filtering policy.

Step 1: Allowlist the MA IP address in Microsoft Exchange

1. Sign in to your Microsoft Outlook® administrative portal.

2. Click Apps > Admin.

3. In the navigation pane, under Admin centers, click Exchange.

4. Under protection, click connection filter.

5. Click the pencil to edit the default connection filter policy.

6. In the sidebar, click connection filtering.

7. Under IP Allow list, click +.

8. On the Add allowed IP address page, enter the MA IP address.

9. Click OK, and then click Save.

10. Make sure your settings work correctly. Send a test MA phishing simulation email to yourself or admins:

    1. In the MA Portal menu, click Administration Dashboard.
    2. Click the User Information tab.
    3. Click Send Test Email.

       Note: To preview the test email, see Email templates. If your test email is not received, verify the steps above, and then send another test email. If you continue to experience issues with receiving test emails, contact Arctic Wolf for assistance.

    See Send a test email for more information about test emails.

Step 2: Bypass clutter and spam filtering in Microsoft Exchange

1. Sign in to your Microsoft Outlook administrative portal.

2. Under Apps, click Admin.

3. In the navigation pane, under Admin centers, click Exchange.

4. In the sidebar, click mail flow.

5. In the rules tab, click + to expand the menu, and then click Bypass spam filtering.

6. In the Name field, enter a name such as Bypass clutter and spam filtering by IP address .

7. In the Apply this rule if menu, select The sender > IP address is any of these ranges or exactly matches.

8. Enter the MA IP address, and then click OK.

9. In the Do the following menu, click Modify the message properties > set a message header.

10. Click Enter text to set the message header, and then enter X-ArcticWolf.

    Tip: This field is case-sensitive.

11. Click OK.

12. After to the value, click Enter text to set the value, and then enter Arctic Wolf.

13. Click OK.

14. Click add action.

15. In the Do the following menu, select Modify the message properties > Set the spam confidence level (SCL) to > Bypass spam filtering.

16. Click Save.

17. Make sure your settings work correctly. Send a test MA phishing simulation email to yourself or admins:

    1. In the MA Portal menu, click Administration Dashboard.
    2. Click the User Information tab.
    3. Click Send Test Email.

       Note: To preview the test email, see Email templates. If your test email is not received, verify the steps above, and then send another test email. If you continue to experience issues with receiving test emails, contact Arctic Wolf for assistance.

    See Send a test email for more information about test emails.

Step 3: Enable a bypass spam filtering policy

1. Sign in to your Microsoft Outlook administrative portal.

2. Under Apps, click Admin.

3. In the navigation pane, under Admin centers, click Exchange.

4. In the sidebar, click mail flow.

5. In the rules tab, click + to expand the menu, and then click Bypass spam filtering.

6. In the Name field, enter a name such as Arctic Wolf junk filter.

7. In the Apply this rule if menu, click The Sender > IP address is any of these ranges or exactly matches.

8. Enter the MA IP address, and then click OK.

9. In the Do the following menu, select Modify the message properties > set a message header.

10. Click Enter text to set the message header, and then enter X-ArcticWolf.

11. Click OK.

12. After to the value, click Enter text to set the value, and then enter Arctic Wolf.

13. Click OK.

14. Click Save.

15. Under Properties of this rule, set the Priority value.

16. Make sure your settings work correctly. Send a test MA phishing simulation email to yourself or admins:

    1. In the MA Portal menu, click Administration Dashboard.
    2. Click the User Information tab.
    3. Click Send Test Email.

       Note: To preview the test email, see Email templates. If your test email is not received, verify the steps above, and then send another test email. If you continue to experience issues with receiving test emails, contact Arctic Wolf for assistance.

    See Send a test email for more information about test emails.

Next steps

• Complete Step 4: Configure browsers to autoplay MA sessions.