Skip to main content

Whitelisting Guide (Proofpoint)

Let revel8 phishing simulations through Proofpoint as a safe sender, and exclude their landing pages from URL Defense.

ℹ️ Info
Part of the Getting Started guide, Step 2. Ensure deliverability.

Proofpoint can quarantine revel8 simulations as spam and rewrite their links so the landing page never opens. This guide adds revel8 as a safe sender, then excludes the simulation landing pages from URL Defense.

Before you begin

Have these ready:

  • Admin access to your Proofpoint console, Essentials or Enterprise.

  • The revel8 values from Settings → Whitelisting (in Integrations): the entries under IP addresses, Email domains and Fake website domains. Your revel8 contact can also send you the list.

⚠️ Warning
revel8 only sends from the email domains and IP addresses that are switched on in Settings → Whitelisting. After you add entries in Proofpoint, switch on exactly those entries in revel8. If you allow revel8 by IP address only, switch on all email domains as well.

1. Add revel8 as a safe sender

Follow the steps for your Proofpoint edition.

1.1 Proofpoint Essentials

  1. In the Proofpoint Essentials admin console, open Security Settings → Email → Sender Lists.

  2. Under Safe Senders, add the revel8 IP addresses and email domains, one per line.

  3. Click Save.

1.2 Proofpoint Enterprise

  1. In the Proofpoint Enterprise admin console, click Email Protection.

  2. Open Spam Protection → Organizational Safe List.

  3. Click Add. In the Proofpoint – Global Safe dialog, set:

    • Filter Type: Sender Hostname

    • Operator: Equals

    • Value: one revel8 IP address

  4. Click Save Changes, and repeat for each IP address.

Changes can take up to 30 minutes to apply.

2. Exclude the landing pages from URL Defense

URL Defense rewrites and scans the links in each email, which can send users to a Proofpoint warning page instead of the simulation's landing page.

📝 Note
URL Defense is part of Proofpoint's Targeted Attack Protection (TAP) add-on. If you do not see it, check that your subscription includes TAP.

  1. In the Proofpoint admin console, click Email Protection.

  2. Under Targeted Attack Protection, select URL Defense.

  3. Click URL Rewrite Policies.

  4. Under Exceptions, add every entry under Fake website domains on the revel8 Whitelisting page. If your page also shows a Link Domains section, you do not need it here.

  5. Click Save Changes.

Check that it works

Send a test simulation to yourself. It should arrive in the inbox, not in quarantine, and its link should open the landing page directly.

Did this answer your question?

Related Articles