> ## Documentation Index
> Fetch the complete documentation index at: https://docs.outkept.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Web protection

> Allow our landing pages through SmartScreen, Defender XDR and content filtering.

<Warning>
  Deze pagina is nog niet vertaald en staat in het Engels.
</Warning>

Microsoft's web protection products (SmartScreen, Defender XDR, web content filtering) block
the landing pages our simulations use. Blocked landing pages mean users never reach the
educational page, so the training half of the simulation is lost.

<Info>
  Do [Domain & IP whitelisting](/nl/whitelisting-ms-domains-ips) first. This is an addition to it,
  not a replacement.
</Info>

A custom indicator policy overrides the blocked category for a specific site, and supersedes
web content filtering for the device group it applies to.

<Steps>
  <Step title="Open indicators">
    In the Microsoft Defender portal, go to **System** then **Settings** then **Endpoints**
    then **Indicators** then **URL/Domain**, and click **Add Item**.
  </Step>

  <Step title="Add the domains">
    Enter the [full domain list](/nl/whitelisting-values#domains), one at a time.
  </Step>

  <Step title="Describe the indicator">
    Give it a title such as `OutKept phishing domain` and a description such as
    `Domain used by OutKept simulations`.
  </Step>

  <Step title="Set the action">
    Select **Allow**.
  </Step>

  <Step title="Set the scope">
    Add it to **All devices in my organisation**, or a narrower scope that fits your setup.
  </Step>
</Steps>

<Note>
  Microsoft needs time to propagate this. Wait one to two hours before the policy takes
  effect. Testing earlier looks like a failure that is really just a delay.
</Note>

## Then what

**Have other security products enabled? Whitelist them now.**

| Product | Where to go |
| - | - |
| Other Microsoft products: Safe Links, Safe Attachments, web protection, whitelisting by header | [Microsoft 365](/nl/whitelisting-microsoft-365) |
| Third-party gateways and firewalls: Barracuda, FortiNet, Vade, WatchGuard | [Whitelisting](/nl/whitelisting) |

Once everything that applies to your environment is whitelisted, send a test email from the
platform and confirm every interaction is recorded. See
[Testing your whitelisting](/nl/whitelisting-testing).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.