Setting up a Microsoft 365 Defender allow list

Procedure

1. Record the Security Awareness sending domains and IP addresses.
   1. On the Trend Vision One console, go to Attack Surface Risk Management → Security Awareness.
   2. Click the settings icon ().
   3. Click Settings and copy the sending domains and IP addresses.
2. Configure Microsoft 365 Defender to allow training campaign invitations and reminders, and phishing simulation emails from Security Awareness.

   Important The following instructions were valid as of July 15, 2024. For further help, refer to the Microsoft 365 Defender documentation.

   1. Sign in to the Microsoft 365 Defender portal using an administrator account.
   2. In the Rules section of the Microsoft 365 Defender portal, go to Email & Collaboration → Policies & Rules → Threat policies → Advanced delivery.
   3. Click the Phishing simulation tab.
   4. Configure your phishing simulations.
      • If you have not previously configured a phishing simulation, click Add.
      • If you have already configured a phishing simulation, click Edit.
   5. In the Add third party phishing simulations screen, enter your sending domains and sending IP addresses in the respective fields.
   6. Click Add.
   7. Click Close.
   You have configured Microsoft 365 Defender to allow employees in your organization to receive training campaign invitations, reminders, and phishing simulation emails from Security Awareness.