> ## Documentation Index
> Fetch the complete documentation index at: https://docs.outkept.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft 365

> Where to start in a Microsoft environment, and what to add after that.

Microsoft whitelisting comes in one required part and several optional ones. Do the required
part first, then add only what your tenant actually runs.

## Start with domain & IP whitelisting

<CardGroup cols={1}>
  <Card title="Domain & IP whitelisting" icon="list-check" href="/whitelisting-ms-domains-ips">
    The primary and recommended method: the mail flow rule, the Advanced delivery phishing
    simulation policy, and the connector. Start here.
  </Card>
</CardGroup>

## Then add whichever of the following apply to your environment

<CardGroup cols={2}>
  <Card title="Safe Links" icon="link" href="/whitelisting-ms-safe-links">
    Stops our links being rewritten, which would otherwise break interaction tracking.
  </Card>

  <Card title="Safe Attachments" icon="paperclip" href="/whitelisting-ms-safe-attachments">
    Stops sandbox detonation registering as a false attachment open.
  </Card>

  <Card title="Web protection" icon="globe" href="/whitelisting-ms-web-protection">
    SmartScreen, Defender XDR and web content filtering blocking our landing pages.
  </Card>

  <Card title="Whitelisting by header" icon="hashtag" href="/whitelisting-header">
    Fallback for when domain & IP whitelisting is not possible in your environment.
  </Card>
</CardGroup>

Skip anything you do not use. If you have no Defender licence and no web content filtering,
domain & IP whitelisting on its own is enough.

## Which ones do I need

| If you use | Do this |
| - | - |
| Any Microsoft 365 tenant | [Domain & IP whitelisting](/whitelisting-ms-domains-ips) |
| Safe Links (Defender plan 1 or 2) | [Safe Links](/whitelisting-ms-safe-links) |
| Safe Attachments | [Safe Attachments](/whitelisting-ms-safe-attachments) |
| SmartScreen, Defender XDR or web content filtering | [Web protection](/whitelisting-ms-web-protection) |
| Nothing above is possible for you | [Whitelisting by header](/whitelisting-header) |

## Testing

Once the parts that apply to you are in place, send a test email from the platform and
confirm every interaction is recorded. See
[Testing your whitelisting](/whitelisting-testing).

<Note>
  Safe Links and web protection changes take time to propagate on Microsoft's side, up to an
  hour for Safe Links, one to two hours for web protection. Test after that, not before.
</Note>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.