This guide was assembled from publicly available WatchGuard documentation and may contain
inaccuracies. Where it disagrees with WatchGuard’s own documentation, follow theirs.
Configure the firewall policy
1
Open Policy Manager
Open Policy Manager on your WatchGuard Firebox and go to Firewall Policies.
2
Add a policy
Click Add Policy and select the appropriate type: SMTP, HTTPS or Any. Name it
something like
Allow OutKept IPs.3
Set the endpoints
Under From, add our
sending IP addresses. Under To, select
Any, or specify your internal servers such as your mail server.
4
Allow and prioritise
Set the action to Allow, and move the policy above any general deny rules.
5
Save
Click OK, then save the configuration.
Allow our domains in WebBlocker and DNSWatch
Our simulations use a set of domains that must pass WatchGuard’s filtering.- WebBlocker
- DNSWatch
Go to Subscription Services then WebBlocker, edit your current policy, and add
our phishing domains to the Allowed
Sites list. Wildcards are recommended where the field supports them.
Allow our sending domains in SpamBlocker
1
Open SpamBlocker
Go to Subscription Services then SpamBlocker, and select the email proxy
service, usually SMTP.
2
Add the senders
Add our domains to the Allowed Senders list in the
sender address form described below. Repeat for every domain.
3
Save
Click Save to apply the changes.
Sender address form
SpamBlocker allows senders rather than domains, so take each entry from the full domain list and enter it as an address with a wildcard local part:Then what
Have other security products enabled? Whitelist them now.
Once everything that applies to your environment is whitelisted, send a test email from the
platform and confirm every interaction is recorded. See
Testing your whitelisting.
On WatchGuard specifically, confirm that:
- Emails are delivered without quarantine or delay.
- Landing pages and links are not blocked by WebBlocker or DNSWatch.