Office 365 Advanced Threat Protection (ATP) Bypass Rules

If you are using Advanced Threat Protection (ATP) in your mail environment and have experienced false clicks or false attachment opens, it is because ATP has link processing and attachment processing rules that are causing this. You can set up additional mail flow rules that allow you to bypass safe links and attachments processing for phishing test emails from KnowBe4's IP addresses. However, if you have a mail filter in front of your mail server, we recommend you whitelist in ATP by email header instead.

Jump to:

ATP Link Processing Bypass Rule
ATP Attachment Processing Bypass Rule

ATP Link Bypass Rule

To set up a mail flow rule to bypass ATP link processing:

1. Create a new mail flow rule in your Exchange/Office Admin center.
2. Give the rule a name such as "Bypass ATP Links".
3. Click More options....
4. From the Apply this rule if…. drop-down menu, select The senders then select IP address is in any of these ranges or exactly matches. 
5. Enter our IP address. For the most up-to-date list of our IP addresses, please see this article. 
6. From the Do the following… drop-down menu, select Modify the message properties... and then set a message header.
   • Click the first *Enter text... link and set the message header to:
     • X-MS-Exchange-Organization-SkipSafeLinksProcessing
   • Click the second *Enter text... link and set the value to:
     • 1
7. Click Save.

Back to Top

ATP Attachment Bypass Rule

Below are the steps to set up a mail flow rule to bypass ATP Attachment Processing:

1. Create a new mail flow rule in your Exchange/Office Admin center.
2. Give the rule a name such as Bypass ATP Attachments.
3. Click more options.
4. From the Apply this rule if… drop-down, select The senders then select IP address is in any of these ranges or exactly matches. 
5. Enter our IP addresses. Please see this article for the most up-to-date list of our IP addresses.
6. From the Do the following… drop-down, select Modify the message properties... and then set a message header.
   
   • Click the first *Enter text... link and set the message header to:
     • X-MS-Exchange-Organization-SkipSafeAttachmentProcessing
   • Click the second *Enter text... link and set the value to:
     • 1
7. Click Save. 

Still need assistance? Submit a support ticket and we can help!

Back to Top