Advanced delivery for third-party phishing simulations (Microsoft 365)
To ensure that all simulated phishing emails actually reach their intended recipients, advanced delivery must be set up in Microsoft 365 Defender. Doing so only takes a few minutes and we have prepared a step-by-step guide to make things easy for you.
Log in to your email server portal with an administrator account and select Security.
Select Policies & rules and then Threat policies.
Under Rules, select Advanced delivery.
Here, first select the tab called Phishing simulation and then select Edit. A new window titled Edit third party phishing simulations will open.
In the corresponding fields, enter the whitelisting information provided in the SoSafe Manager (Settings / Whitelisting) as follows:
The domains provided under Envelope sender addresses (technical senders) belong in Sending Domain on the Microsoft page. Note that only the domain, the part after the @ (name@domain.com), should be added here, not the entire address.
The IPv4 addresses provided under SoSafe mail servers belongs in Sending IP on the Microsoft page.
The domains/URLs provided under List of used domains in the phishing links belong under Simulation URLs to allow on the Microsoft page. Please use the following format: "~example.com~".
Select Save to finish the process. It may take some time for the changes to take effect.
Microsoft only allows adding a total of 30 entries. As a result, you must also whitelist the phishing domains in Microsoft Defender. See Whitelisting domains with safe links (Microsoft Defender) for more information.
Settings / Whitelisting in the Manager
Edit third party phishing simulations on the Microsoft page