> ## Documentation Index
> Fetch the complete documentation index at: https://docs.outkept.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Vade

> A mail flow rule that carries your Microsoft 365 whitelist through to Vade.

<Warning>
  Deze pagina is nog niet vertaald en staat in het Engels.
</Warning>

Vade Secure does not read your Microsoft 365 whitelists on its own. A mail flow rule that
stamps the `X-VADE-O365` header tells Vade to stop filtering the mail that Microsoft has
already accepted.

Do your [Microsoft 365 whitelisting](/nl/whitelisting-microsoft-365) first. This rule builds
on it.

<Steps>
  <Step title="Open the Exchange admin center">
    Sign in to the Exchange admin center.
  </Step>

  <Step title="Start a bypass rule">
    Go to **Mail Flow** then **Rules**, click **+**, and select **Bypass Spam
    Filtering**.
  </Step>

  <Step title="Set the condition">
    Name the rule. Under **Apply this rule if**, select *The sender*, then either *the
    domain is* to whitelist our domains, or *the address matches one of the following text
    patterns* to whitelist specific addresses.

    Enter our [phishing domains](/nl/whitelisting-values#domains), then click
    **+** and **OK**. Mail from these senders is now treated as safe by the Microsoft
    filters, EOP and ATP.
  </Step>

  <Step title="Add the Vade header action">
    Click **add action**, and select *Edit message properties* then *Set message header*.

    Click the first **Enter text** link and enter `X-VADE-O365`. Click **OK**. Click the
    second **Enter text** link and enter the customer's name as the value. Click **OK**.
  </Step>

  <Step title="Save">
    Uncheck **Audit this rule with severity level**, then click **Save**.
  </Step>
</Steps>

The new rule appears in the rules table.

## Then what

**Have other security products enabled? Whitelist them now.**

| Product | Where to go |
| - | - |
| Microsoft 365: domain & IP whitelisting, Safe Links, Safe Attachments, web protection | [Microsoft 365](/nl/whitelisting-microsoft-365) |
| Google Workspace: Direct Message Injection | [Google Workspace](/nl/whitelisting-google-workspace) |
| Other gateways and firewalls: Barracuda, FortiNet, WatchGuard | [Whitelisting](/nl/whitelisting) |

Once everything that applies to your environment is whitelisted, send a test email from the
platform and confirm every interaction is recorded. See
[Testing your whitelisting](/nl/whitelisting-testing).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.