This article explains how to set up the allowlist for the Security Awareness Service in Kerio Connect.

The allowlist ensures that simulated phishing emails from the Security Awareness Service are not blocked by Kerio Connect due to IP-based blocklist checks.

Note

Kerio Connect is operated by GFI Software. The user interface and available settings may change with updates.

Therefore, also check the current GFI Software documentation if the menu items described here differ in your version of Kerio Connect.

Prerequisites

Make sure that the following prerequisites are met:

• You have administrator access to Kerio Connect.
• You know the current IP addresses or IP address ranges of the Security Awareness Service.

Create an IP address group

1. Sign in to Kerio Connect Administration.
2. Go to Configuration > Definitions > IP Address Groups
3. Click Add.
4. Create a new IP address group.
5. Add the IP address ranges of the Security Awareness Service.
6. Save the IP address group.

GFI also describes IP address groups under Configuration > Definitions > IP Address Groups. IP address groups can be used in other Kerio Connect settings.

Use the IP address group as an allowlist

1. Go to Configuration > Content Filter > Spam Filter > Blocklist.
2. Go to the Custom IP Address Allowlist.
3. Enable the Use IP address group option.
4. Select the IP address group you created previously.
5. Save the changes by clicking Apply.

According to GFI, messages from servers on this allowlist are not checked against the Kerio Connect spam filters relevant to this section. The configuration is made under Spam Filter > Blocklist or, in the current path, under Configuration > Content Filter > Spam Filter > Blocklist.

If emails continue to be blocked

Note that, according to GFI, the IP allowlist in Kerio Connect only applies to checks against Internet Blocklists . If simulated phishing emails continue to be blocked or are classified as spam, additional spam filter checks may apply.

In this case, also check the following:

• Additional spam filter rules in Kerio Connect
• Custom Rules under Configuration > Content Filter > Spam Filter > Custom Rules
• Upstream gateways or firewalls
• Web filters or link scanners
• Antivirus or sandbox features

For cases in which custom allowlists do not fully override the spam filter, GFI describes an additional rule under Custom Rules. This allows a message to be treated as non-spam based on a header.

Additional information

You can find the current IP addresses, IP address ranges, and domains for the Security Awareness Service in the documentation on allowing simulated phishing emails.