4067 Hardwick Street, #540

Lakewood, CA 90712
(800) 245-1233

BULLPHISH ID PHISHING SIMULATION

BYPASS DOMAIN & IP ADDRESS IN EXCHANGE SERVER
Go to Exchange on Microsoft 365 Admin Center
 4067 Hardwick Street, #540
Lakewood, CA 90712
(800) 245-1233

BULLPHISH ID PHISHING SIMULATION

BYPASS DOMAIN & IP ADDRESS IN EXCHANGE SERVER
Go to Mail Flow -> Rules on Exchange admin Center
 4067 Hardwick Street, #540
Lakewood, CA 90712
(800) 245-1233

BULLPHISH ID PHISHING SIMULATION

BYPASS DOMAIN & IP ADDRESS IN EXCHANGE SERVER
In Rules you will normally find a rule associated with Vade, this in order to add domains to the white list of Vade, but you need to create another rule for
the exchange server itself. In our case we have already created the rule for the exchange to work with Campaign Phishing.

Rule associated with

Campaign Phishing

Rule associated with Vade

 4067 Hardwick Street, #540
Lakewood, CA 90712
(800) 245-1233

BULLPHISH ID PHISHING SIMULATION

BYPASS DOMAIN & IP ADDRESS IN EXCHANGE SERVER
Clicking on the rule associated with Campaign Phishing, we see the conditions with which it was created.
 4067 Hardwick Street, #540
Lakewood, CA 90712
(800) 245-1233

BULLPHISH ID PHISHING SIMULATION

BYPASS DOMAIN & IP ADDRESS IN EXCHANGE SERVER
Clicking on the rule associated with Campaign Phishing, we see the conditions with which it was created.

1.- Create the rule and place the following

conditions:

First condition:
- The sender (first box) address includes any of
the words (second box)... in the following (+)
add the domain from which the Bullphisp or
Vade emails are sent.
Second condition:
- The sender (first box) domain is (second
box)... in the next (+) add the domain from
which the Bullphisp or Vade emails are sent.
 4067 Hardwick Street, #540
Lakewood, CA 90712
(800) 245-1233

BULLPHISH ID PHISHING SIMULATION

BYPASS DOMAIN & IP ADDRESS IN EXCHANGE SERVER
Clicking on the rule associated with Bullphisp, we see the conditions with which it was created.

2.- Create the action:

- Modify the message properties (first box) set

the spam confidence level (SCL) to (second
box)… in the following (+) add -1
 4067 Hardwick Street, #540
Lakewood, CA 90712
(800) 245-1233

BULLPHISH ID PHISHING SIMULATION

BYPASS DOMAIN & IP ADDRESS IN EXCHANGE SERVER
Clicking on the rule associated with Campaign Phishing, we see the conditions with which it was created.

3.- Configure settings:

- Priority: 0
- Rule mode: Enforce
- Severity: Not audit

Finally, click on Save.

 4067 Hardwick Street, #540
Lakewood, CA 90712
(800) 245-1233

BULLPHISH ID PHISHING SIMULATION

BYPASS DOMAIN & IP ADDRESS IN EXCHANGE SERVER
Clicking on the rule associated with Vade Whitelist Domains, we see the conditions with which it was created.
 4067 Hardwick Street, #540
Lakewood, CA 90712
(800) 245-1233

BULLPHISH ID PHISHING SIMULATION

BYPASS DOMAIN & IP ADDRESS IN EXCHANGE SERVER
Clicking on the rule associated with Vade Whitelist Domains, we see the conditions with which it was created.

1.- Create the rule and place the following

conditions:

First condition:
- The sender (first box) IP address is in any of
these ranges or exactly matches (second
box)... in the following (+) add the IP address
or IP segment from which the Bullphisp or
Vade emails are sent.
Second condition:
- The sender (first box) domain is (second
box)... in the next (+) add the domain from
which the Bullphisp or Vade emails are sent.
 4067 Hardwick Street, #540
Lakewood, CA 90712
(800) 245-1233

BULLPHISH ID PHISHING SIMULATION

BYPASS DOMAIN & IP ADDRESS IN EXCHANGE SERVER
Clicking on the rule associated with Vade Whitelist Domains, we see the conditions with which it was created.

2.- Create the action:

First action:
- Modify the message properties (first box) set
the spam confidence level (SCL) to (second
box)… in the following (+) add -1
Second action:
- Modify the message properties (first box) set
a message header (second box)… in the first
textbox place “X-VADE-O365” and the
second “client name”
 4067 Hardwick Street, #540
Lakewood, CA 90712
(800) 245-1233

BULLPHISH ID PHISHING SIMULATION

BYPASS DOMAIN & IP ADDRESS IN EXCHANGE SERVER
Clicking on the rule associated with Vade Whitelist Domains, we see the conditions with which it was created.

3.- Configure settings:

- Priority: 0
- Rule mode: Enforce
- Severity: Not audit

Finally, click on Save.