Cisco Ironport safelisting guide

If you're using Cisco Ironport spam filtering, you can safelist BullPhish ID to allow our simulated phishing test emails and training notifications to your end-users.

The instructions below include information from the Cisco whitelisting article. If you run into issues safe listing BullPhish ID in Cisco Ironport, we recommend reaching out to Cisco for specific instructions. You can also contact our support team whenever you need assistance.

Safelisting Cisco Ironport

To safelist BullPhish ID in Cisco Ironport, do the following:

  1. From the Cisco Ironport admin console, navigate to Mail Policies.
  2. Select HAT Overview. Please ensure that inbound mail lister is selected.
  3. Click WHITELIST. If you do not see WHITELIST, you can create your group titled as such.
  4. Click Add Sender and add our IPs. For the most up-to-date list of our IP addresses, see the article Reference guide for deliverability.
  5. Click Submit and then Commit Changes.

Skipping Outbreak Filter Scanning

The instructions above for safe listing Cisco Ironport do not prevent Ironport's Outbreak Filter from scanning emails from our IPs. If you are experiencing issues with our emails being quarantined, you may also need to set our IPs to bypass this filter. 

To skip Outbreak Filter Scanning, do the following:

  1. From your Cisco Ironport admin console, navigate to Mail Policies.
  2. Under the Message Modification section, enter our IPs in the Bypass Domain Scanning. For the most up-to-date list of our IP addresses, see the article  Reference guide for deliverability.
  3. Click Submit and then Commit Changes.