Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Current »

With changes in M365, specifically around Secure by Default, simulation emails from KB4 may be quarantined by M365. The guide below creates a bypass to ensure these simulation emails are not quarantined and are processed by INKY.

Useful Links:

https://support.knowbe4.com/hc/en-us/articles/4404511190803-How-to-Use-Advanced-Delivery-Policies-in-Microsoft-365

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/configure-advanced-delivery?view=o365-worldwide&data=04%7C01%7C%7Ccd230c8e695045881d0008d93bb177dd%7C3cfadf87221245b5b7c757c1e0f21997%7C0%7C0%7C637606455672812570%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=sHT2HaGUIchv9%20khaFFHRbxdBsj8LMJS4XWofRs%20NvM%3D&reserved=0#use-the-microsoft-365-defender-portal-to-configure-third-party-phishing-simulations-in-the-advanced-delivery-policy

\uD83D\uDCD8 Instructions

  1. Navigate to https://app.inkyphishfence.com/settings/phishing-awareness-training

    1. Set KnowBe4 as the Platform

    2. Custom Banner - Neutral (we recommend neutral as it’ll mean you’re testing users on what if INKY misses the phish, but you can set Caution or Danger to force those banners as well).

    3. Always Check: Do not attach raw messages to reports for simulated phishing messages to ensure that reported messages aren’t rescanned and potentially cause click events.

    4. Optionally, select the other options as needed (Note: leaving the email notification address blank will not send an email to anyone)

      image-20240208-175220.png

  2. Navigate to https://security.microsoft.com/advanceddelivery?viewid=PhishingSimulation

  3. Add KB4 IPs and the below INKY IPs. After adding the IPs, your Advanced Delivery should look similar to the below screenshot:

    1. INKY IPs: 3.231.237.226, 100.24.129.5, 3.132.108.44, 3.132.222.232, 100.21.157.149, 34.210.15.192

    2. KnowBe4 US, CA, UK, and DE IPs: 147.160.167.0/26, 23.21.109.197, 23.21.109.212 OR…

    3. KnowBe4 EU IPs: 147.160.167.0/26, 52.49.201.246, 52.49.235.189, 23.21.109.197,  23.21.109.212

  4. You’ll also want to make sure your KnowBe4 DKIM Domains need to be listed on the above page and ensure DKIM is turned on within KnowBe4 here: https://training.knowbe4.com/ui/account/info#phishing

  • No labels