Skip to main content
Barracuda whitelisting is spread across several features. Which ones you need depends on what you have enabled. Work through the sections that apply to you. The steps also differ between Email Security Service (cloud) and Email Security Gateway (on-premises). Each section below has a tab for each.
These instructions are summarised from Barracuda’s knowledge base. If you run into trouble, Barracuda support can give product-specific guidance.

​
IP whitelisting

Allows our mail through connection filtering.
1

Open IP address policies

Log in to Barracuda Cloud Control and go to Email Security then Inbound Settings then IP Address Policies.
2

Add each IP

In the IP Blocking / Exemption section, use the top line to enter one of our sending IP addresses. Set Netmask to 255.255.255.255 and Policy to Exempt. A comment such as OutKept Simulated Phishing IP Address is useful later.
3

Repeat

Click Add, then repeat for each of our IP addresses.

​
Intent Analysis

Intent Analysis alters the URLs in mail, which skews phishing test results. Exempt our domains from it.
1

Open anti-phishing

Log in to Barracuda Cloud Control and go to Email Security then Inbound Settings then Anti-Phishing.
2

Add our domains

Under the Intent section, add our phishing domains with the Policy drop-down set to Ignore.

​
Sender Authentication

SPF checks will fail on simulation mail unless our IPs are exempted.
Log in to Barracuda Cloud Control, go to Email Security then Inbound Settings then Sender Authentication, and enter our sending IP addresses in the SPF exemptions table under Use Sender Policy Framework.

​
Advanced Threat Protection

If you use ATP and are seeing false clicks or false attachment opens, exempt our IPs from PDF scanning.
1

Open ATP settings

Log in to the Barracuda Email Security Gateway web interface and select the ATP Settings tab.
2

Add the exemptions

Enter our sending IP addresses with their subnet masks, and click Add.

​
Sentinel allowed senders

Sentinel’s allowed senders list lets our mail bypass your existing whitelisting rules.
1

Open allowed senders

Log in to the Barracuda admin console, click Dashboard, click the settings gear, and click Allowed Senders.
2

Add our domains

Enter our phishing domains in the Sender Email or Domain field. A comment is optional. Click Save.
3

Repeat

Sentinel accepts one address or domain at a time, so repeat for each domain.

​
Then what

Have other security products enabled? Whitelist them now. Once everything that applies to your environment is whitelisted, send a test email from the platform and confirm every interaction is recorded. See Testing your whitelisting. If problems persist and you have a service provider, they are the next place to ask.