Forum Discussion
Attack Simulation Phishing Tool - IP whitelist
I'm trying to find IP's or domains to whitelist when using the Attack Simulation Phishing Tool. We currently use proofpoint but are planning to move into O365/Exchange online. Would a whitelist for M...
The list of URLs is here: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulation-training-get-started?view=o365-worldwide
It hasn't changed for some time. I can't say I recollect looking at the name-to-IP resolution. You need to make sure that any third-party web proxy or next-generation firewall you have does not block the URLs you chose for your payloads.
Of course, if your users get very competitive about their results (or even routinely do a thorough job of checking, heaven be praised, a minor miracle) then they may find that Learn page with a Search.