To Allow Right-Hand's Training Emails / Phishing Simulation emails in Mimecast, follow the below instructions for various policies that you'll add to your Mimecast console.
Please follow the below order for whitelisting.
Anti-Spoofing Policy
Follow the steps below to allow Right-Hand to send emails from Right-Hand domain.
Sign in to Mimecast Administration Console.
Select the Administration Toolbar button.
Choose Gateway | Policies menu.
Choose Anti-Spoofing from the list of policies.
Click on the New Policy button.
Choose the suitable policy settings under the Options, Emails From, Emails To, and Validity sections. For more detailed information on this Configuration please refer here
Select the Policy Override check box.
In the Source IP Ranges field, enter Right-Hand IP ranges. please refer here for our IP ranges.
Click Save. Saving this policy will allow the emails from the Right-Hand domain.
Permitted Sender's Policy
A new Permitted Sender Policy should be created to allow Right-Hand's Training Emails/Phishing Simulation emails to reach the user's mailbox.
Note: Always create a new Policy. Do not edit the default one. |
In the following steps, you can authorize Right-Hand to send emails on your behalf, displaying an email address of your domain.
Access the Mimecast Administration Console.
Click on the Administration Toolbar button.
Choose Gateway | Policies menu.
Choose Permitted Sender from the list of policies.
Click on the New Policy button.
Choose the suitable policy settings under the Options, Emails From, Emails To, and Validity sections. For more detailed information on this Configuration please refer here
Select the Policy Override check box.
In the Source IP Ranges field, enter Right-Hand IP ranges. please refer here for our IP ranges.
Click on Save. Saving this policy will allow the Training Emails/Phishing Simulation emails from the Right-Hand domain.
Attachment Protection Bypass Policy
To allow attachments from simulated Phishing campaigns, follow the below steps to successfully whitelist Right-Hand emails.
Note: Always create a new Policy. Do not edit the default one.
In the following steps, you can authorize Right-Hand to send emails on your behalf, displaying an email address of your domain.
Access the Mimecast Administration Console.
Click on the Administration Toolbar button.
Choose Gateway | Policies menu.
Choose Attachment Protection ByPass from the list of policies.
Click on the New Policy button.
Choose the suitable policy settings under the Options, Emails From, Emails To, and Validity sections. For more detailed information on this Configuration please refer here
Select the Policy Override check box.
In the Source IP Ranges field, input the IP ranges for Right-Hand. You can find our IP ranges here.
Click Save. Saving this policy will allow the emails with attachments from the Right-Hand domain.
URL Protection Bypass Policy
Mimecast's URL Protection service scans and checks links in all delivered emails. Follow the steps below to create a new URL protection bypass policy:
Access the Mimecast Administration Console.
Click on the Administration Toolbar button.
Choose Gateway | Policies menu.
Choose URL Protection ByPass from the list of policies.
Click on the New Policy button.
Choose the suitable policy settings under the Options, Emails From, Emails To, and Validity sections. For more detailed information on this Configuration please refer here
Select the Policy Override check box.
In the Source IP Ranges field, enter Right-Hand IP ranges. please refer here for our IP ranges.
Click on Save.
Impersonation Protection Bypass Policy
This policy is used to allow whaling/phishing emails pretend to come from users/domains that look like they are internal to your organization.
Access the Mimecast Administration Console.
Click on the Administration Toolbar button.
Choose Gateway | Policies menu.
Choose Impersonation Protection ByPass from the list of policies.
Click on the New Policy button.
Choose the suitable policy settings under the Options, Emails From, Emails To, and Validity sections. For more detailed information on this Configuration please refer here
Select the Policy Override check box.
In the Source IP Ranges field, enter Right-Hand IP ranges. please refer here for our IP ranges.
Click Save.
Please note: In the 6th step, in the Select Option field under Options, select the impersonation protection definition you want to be bypassed. To bypass multiple definitions, you will need to create a separate Impersonation Protection Bypass Policy for each one.
Attachment Management Bypass Policy
Configuring this Attachment management ByPass policy will help you prevent attachments from being removed from your simulated phishing emails.
Access the Mimecast Administration Console.
Click on the Administration Toolbar button.
Choose Gateway | Policies menu.
Choose Attachment Management ByPass from the list of policies.
Click on the New Policy button.
Choose the suitable policy settings under the Options, Emails From, Emails To, and Validity sections. For more detailed information on this Configuration please refer here
Select the Policy Override check box.
In the Source IP Ranges field, enter Right-Hand IP ranges. please refer here for our IP ranges.
Click on Save.
Preventing Mimecast from Re-Writing Phishing Links
To prevent Mimecast from re-writing the links in the simulated Phishing emails, please do add Right-Hand's phish link domains as Permitted URLs.
You can find a list of Right-Hand phishing link domains. To disable link re-writing on permitted URLs, please refer here.
Please remember, it's not advisable to make an exception for this situation unless you already have established exceptions for other senders. Otherwise, any deviation from a rewritten Mimecast URL could raise concerns for users and potentially affect the accuracy of your results.
For additional details regarding the deactivation of link rewriting for approved URLs, refer to Mimecast's article titled "Targeted Threat Protection: Managed URLs."
Please follow the below steps to prevent Mimecast from Re-Writing Phishing links:
Listing Managed URLs
To view your managed URLs:
Log in to the Administration Console.
Go to Services > URL Protection.
Select the URL Tools drop-down menu.
Click on Managed URLs to display the list of managed URLs.
To add one or more URLs and/or domains to your Managed URLs list:
Click Add Managed URLs.
Fill out the dialog as follows:
Field / Option | Description |
Override Type | This specifies the type of override to be applied to the URLs or domains. The options are:
|
Disable Rewriting For This Entry | If the option is enabled, Mimecast will rewrite the URLs, and if the option is disabled, Mimecast will not rewrite the URLs. If unselected, URLs are re- written regardless of the domain or URL type.Note:This option is only available if the "Override Type" option is set to "Permitted". |
Disable User Awareness | If user awareness is enabled, this option disables it for the specified URLs and/or domains. As a result, they are not checked for threats.Note:This option is unavailable if the "Disable Rewriting For This Entry" option is selected. |
Match Type | This specifies the type of domain match. The options are:
|
URLs | Specify the URLs and / or domains to be added to the managed URLs list.
Note:If you enter a duplicate managed sender URL, a message appears asking if you would like to overwrite the existing entry.
Please add the below domains to the list:
Note:The use of wildcard characters is not recommended, as it can cause a significant security risk. |
Comments | Enter a comment about the Managed URL record. This is recorded in the audit log. |
3. Select Save and Close.
DNS Authentication ByPass Policy (Optional)
If Right-Hand emails are sent to the spam folder, configure this additional policy. You will first have to set up the inbound definition and next create the policy.
DNS Authentication - Inbound Definition Setup
Access the Mimecast Administration Console.
Click on the Gateway | Policies menu.
Under Definitions drop-down choose DNS Authentication - Inbound option.
Choose New DNS Authentication - Inbound checks.
Select the Policy Override check box.
Click on Save and Exit to save all the modifications.
DNS Authentication - Inbound Policy Setup
Access the Mimecast Administration Console.
Click on the Gateway | Policies menu.
Click on DNS Authentication - Inbound policy.
Choose New Policy.
Choose required policy settings as listed below.
Options
a ) Policy Narrative - Phishing Test
b) Select option - No Authentication
Emails From
a) Addresses based on - Both
b) Applies from - Everyone
c) Specifically - Applies to all Senders
Emails To
a) Applies To - Address Groups
b) Profile Group - Email Security Admins
Provide Right-Hand IP ranges into the Source IP Ranges field.
Check the Policy Override option.
Click on Save and Exit to save all the modifications.
Greylisting ByPass Policy
To prevent Mimecast from preventing emails from being deferred, please add this policy. Follow the steps below instructions to add this new policy.
Access the Mimecast Administration Console.
Click on the Administration Toolbar button.
Choose Gateway | Policies menu.
Choose Greylisting from the list of policies.
Click on the New Policy button.
Choose the suitable policy settings under the Options, Emails From, Emails To, and Validity sections. For more detailed information on this Configuration please refer here
Select the Policy Override check box.
In the Source IP Ranges field, enter Right-Hand IP ranges. please refer here for our IP ranges.
Click on Save and Exit to save all the modifications.
CyberGraph Policy (Optional)
If you encounter problems with Mimecast removing Right-Hand's email trackers, you can implement this policy. Mimecast's CyberGraph Policy will prevent the removal of email trackers. Follow the steps below to set up the CyberGraph policy:
Access your Mimecast Administration console by logging in.
Go to Services and then, CyberGraph.
Select the option to Create New Policy.
Name the policy, such as “Right-Hand CyberGraph Policy”.
You may optionally describe the policy.
Choose "Disabled" in the Dynamic Banners field.
Choose Disabled In the Trackers field,
Choose the "Disabled" option in the User Reporting field.
Click Next.
Within the Applies To section, configure the From field to apply to Everyone. Subsequently, set the To field to also encompass Everyone.
Within the Source IP Ranges field, input Right-Hand's IP addresses.
Proceed by clicking on "Next". This will direct you to the Summary page, where you can verify that your settings are accurate.
Select Disabled in the Trackers field.
Click on Create New Policy.