Sophos Central Admin

This article is currently under revision. For more information on whitelisting IPs, see our documentation portal: Allowing the Delivery of Simulated Phishing Emails.

Please treat the contents of this article with caution.

As part of the IT-Seal phishing simulation, we ask you to allow our email servers. These are IP 84.16.227.187 and 94.100.132.73. Our interactive explanation page, to which participants are redirected when they click on one of our phishing links, is also hosted there.

Allow/Block lists for Sophos Central Admin

Use the Email Secruity page on the left and then (again on the left) go to Settings under the Configuration category to configure lists that define trusted and known bad hosts and senders and a list of whitelisted URLs. For "Allow/Block Incoming" click the Add -> Add Allow button.
In the text box, enter the IP address of IT-Seal and HornetSecurity (84.16.227.187 and 94.100.132.73), check the Enforce sender authentication box and press Save.
To ensure this, there should now be a line on the page with "ALLOW", the IP address of IT-Seal, the current date and "Enforced". 

• Messages from the allowed list will bypass anti-spam filtering.
• URLs in the whitelist are not rewritten if the ToC policy is configured to skip these URLs