How to Whitelist in Avanan for Exchange Online and Gmail

If you are using Avanan in your organization's environment, you can whitelist KnowBe4 to ensure our phishing test emails and training notifications are delivered to your users. To whitelist KnowBe4, you can create a policy that lets Avanan know messages from KnowBe4 do not need to be blocked or filtered.

In this article, you’ll learn how to set up these policies in the Office 365 and Gmail platforms. If you experience any issues whitelisting KnowBe4 in your Avanan services, we recommend reaching out to Avanan directly for assistance. You can also contact our support team and we will be happy to assist you.

Jump to:

• Whitelisting in Avanan for Office 365
• Whitelisting in Avanan for Gmail

Whitelisting in Avanan for Office 365

In order to whitelist KnowBe4 in Office 365, you will need to create a mail flow rule in the Exchange admin center. This rule will look for KnowBe4’s IP addresses and add a header that lets Avanan know that the email is safe.

To set up your mail flow rule, follow the steps below:

1. In the left navigation pane of your Microsoft Admin console, navigate to Admin centers > Exchange. You can also access the Exchange admin center by navigating to admin.exchange.microsoft.com.
2. From the Exchange admin center, locate Mail Flow > Rules in the left navigation pane.
3. Click the Add drop-down menu, which will look like a + sign.
4. From the Add drop-down menu, select Create a new rule. When you select Create a new rule, the New Rule dialog box will open.
5. In the New Rule dialog box, fill out the following fields:
   1. 147.160.167.0/26
   2. 23.21.109.197
   3. 23.21.109.212
1. Name: Enter a name for the rule.
2. Apply this rule if…: From this drop-down menu, select Sender’s IP address is in the range….
3. add condition: Click this button.
4. IP Addresses: Follow the steps on screen to add the following KnowBe4 IP addresses:
5. Do the following…: From this drop-down menu, select Set the Message Header to This Value.
6. Enter text…: Select the first Enter text… option next to “Set the header”.
7. message header: Enter and select “X-CLOUD-SEC-AV-Info.”
8. OK: Click this button.
9. Enter text…: Select the second Enter text… option next to “to the value”.
10. Header Value: Enter “{portalname},office365_emails,inline”. Replace {portalname} with the name of your Avanan portal.
11. OK: Click this button.
12. Audit this rule with severity level: Select this check box in the Properties of this rule: area.
13. Enforce: Select this option in the Choose a mode for this rule area.
14. Stop processing more rules: Select this check box.
15. Save: Click this option to apply the rule to your server.

For more information about mail flow rules in Office 365, see Microsoft’s Manage mail flow rules in Exchange Online article.

Back to top

Whitelisting in Avanan for Gmail

To whitelist KnowBe4 with Gmail, you will need to create a content compliance rule. This rule will look for KnowBe4’s IP addresses and adds a header that lets Avanan know that the message is safe. Creating this rule will prevent SmartPhish and any sandboxing tools you have from blocking simulated phishing tests and training notifications.

To set up your content compliance rule, follow the steps below:

1. Log in to your Google Admin console.
2. From the Admin console home page, navigate to Apps > Google Workspace > Gmail > Compliance.
3. If you manage more than one organization, select the organization where you would like to apply the rule from the Compliance pane.
4. In the Compliance section, hover your mouse over the Content Compliance setting, and click Configure. The Content compliance dialog box will open.

   Note: If you have previously configured your content compliance setting, the option will be called Edit. You can also create a new setting by clicking Add Another.

5. In the Content compliance dialog box, fill out the following fields:
   1. 147.160.167.0/26
   2. 23.21.109.197
   3. 23.21.109.212
1. Inbound: Select this check box in the Email messages to affect section.
2. Add: Click this button in the Expressions section.
3. First drop-down menu: Select Metadata match from the first drop-down menu in the Expressions section.
4. Attribute: From this drop-down menu, select Source IP.
5. Match type: From this drop-down menu, select Source IP is not within the following range.
6. IP addresses: Follow the steps on screen to add the following KnowBe4 IP addresses:
7. If the above expressions match, do the following: In this section, click the drop-down menu and select Modify Message.
8. Headers: In this section, select the Add custom headers check box.
9. Custom Headers: In this section, click Add.
10. “X-CLOUD-SEC-AV-Info”: Follow the options on the screen to set the “X-CLOUD-SEC-AV-Info” header to the value “{portalname},office365_emails,inline”. Replace {portalname} with the name of your Avanan portal.
11. Save: Click the Save button to apply the rule.

For more information about content compliance rules in Gmail, see Google’s Set up rules for advanced email content filtering page.

Back to top