Whitelist Simulations in Exchange On-prem

This guide describes how to whitelist Nimblr simulated attacks in on-premise Microsoft Exchange servers. The layout may vary slightly between different releases. Please refer to the Microsoft Documentation for further details.

Configure IP Allow List

1. Login to your email system and select Admin.

2. Select Exchange under Admin Centers on the left hand side.

3. Select connection filter under protection. (In certain instances of Exchange 2016 installations, the connection filter may be inaccessible, requiring the filter to be updated through PowerShell as detailed in this Microsoft article.)

4. Click the pen to edit “default connection filter”.

5. Select Connection filter click the plus sign (+) to add IP-addresses.

6. Add the following IP-adresses, one at the time:

78.47.225.98
116.203.167.208
95.216.176.28

Bypass Clutter & Spam Filter

1. Go to Exchange Admin Center and select Mail Flow on the left hand side.
2. Click the plus sign (+) under Rules and select Bypass spam filtering...

3. Name the rule “Bypass Clutter & Spam by IP” f.ex.

4. Click the drop-down list and Apply this rule if... and select The Sender and IP address is in any of these ranges or exactly matches

5. Add IP-adressess: 78.47.225.98, 116.203.167.208 and 95.216.176.28.

6. Click the drop-down list Do the following and select Modify the message properties and set a message header.

7. Click the *Enter text... after "Set the message header". Enter the following text: "X-MS-Exchange-Organization-BypassClutter". Remember to differentiate upper uppercase and lowercase letters. Click OK.

8. Click *Enter text... after "to the value" and type "true".Remember to differentiate upper uppercase and lowercase letters. Click OK and add action.

9. Open the drop-down list Do the following... and select Modify the message properties. Click Set the spam confidence level (SCL) to... and select Bypass Spam Filtering.

10. Click Save.

Verify Whitelist configuration

Send a test simulation to verify that your whitelist configurations are functional. Login to your Nimblr portal on https://nimblr.net and navigate to Settings > Delivery test. Send a test simulation to a by clicking Send Email.