Skip to main content

How do I whitelist using Sophos?

Soumalya Mitra avatar
Written by Soumalya Mitra
Updated over 4 months ago

Sophos Email Appliance (SEA)

Whitelisting within your Sophos Email Appliance (SEA) permits your users to receive phishing and training-related emails from Right-Hand. If you encounter any difficulties while whitelisting Right-Hand on your Sophos appliance, we advise contacting Sophos for detailed instructions.

The instructions below incorporate details from the SEA Configuration guide and the Allow/Block Lists article, both provided by Sophos.

Table of contents

  1. Modify the Allow/Block Lists

  2. Sophos Perimeter Protection

Modify the Allow/Block Lists

The Allow/Block lists permit you to specify trusted or untrusted hosts and senders. Emails originating from allowed hosts and senders will not undergo Sophos anti-spam filtering.

To include Right-Hand in the Allow list, follow these steps:

  1. Access Configuration, then navigate to Policy, and finally, Allow Lists in your SEA manager.

  2. Click on the relevant list to bring up the List Editor dialog box.

  3. If you use an extra spam filter before SEA, click on the Senders tab. If not, select the Hosts tab.

  4. Type each necessary item into the "Add entries" text box and then click on "Add".

  5. The following steps depend on your choice in Step 3 (Hosts/Senders).

    1. Enter Right-Hand's server hostnames individually on the Sender tab. For the latest list, please see this link.

    2. In the Hosts tab, add Right-Hand's IPs one at a time. For the most recent list, please check this link.

  6. Alternatively, you can add Right-Hand phish links and landing domains to the Whitelisted URLs list if desired.

Sophos Perimeter Protection

Sophos offers a Perimeter Protection setting that blocks emails from non-existent domains, and we advise against disabling this setting. Disabling it could potentially allow genuine spam to bypass your filters.

  • You have the option to change the senders in phishing templates to utilize one of Right-Hand’s phishing links or landing domains as a workaround.

Did this answer your question?