Start with your mail platform
Microsoft 365
IP and domain whitelisting, Advanced delivery and the connector. Start here.
Google Workspace
Direct Message Injection removes the need for IP whitelisting altogether.
Barracuda
Email Security Gateway, Intent Analysis, ATP and Sentinel.
FortiNet
Static URL filter in the web filter profile.
Vade
Mail flow rule that carries your Microsoft 365 whitelist through to Vade.
WatchGuard
Firebox policy, WebBlocker, DNSWatch and SpamBlocker.
The order to do it in
1
Whitelist IPs and domains on your mail platform
This is the primary method and the one that does most of the work.
2
Add the products you actually run
Safe Links, Safe Attachments, web protection, your gateway or your firewall. Skip
anything you do not use.
3
Fall back to the header if needed
Only if whitelisting by IP and domain is not possible in your environment. See
Whitelisting by header.
4
Send a test email and check every interaction

