Whitelist Jericho Security in Barracuda Email Gateway
Barracuda Email Gateway Defense (also known as Email Security Service) filters inbound messages by IP address and sender domain. To allow Jericho Security simulation emails to pass through, you need to configure both an IP address allow list and a sender domain allow list. Sender, IP, and URL policies address different checks; test each protection layer used in your environment.
IP address whitelisting
Section titled “IP address whitelisting”Open IP Address Policies
Section titled “Open IP Address Policies”In Barracuda Email Gateway Defense, navigate to Inbound Settings > IP Address Policies.
Add the Jericho IP ranges
Section titled “Add the Jericho IP ranges”Add the confirmed sending IPs using the Exempt action after reviewing the required scope.
For standard Jericho email delivered through Amazon SES, use 24.110.88.85 and 24.110.88.86. See the allowlisting overview for verification date, scope, and CIDR equivalents.
Save your changes
Section titled “Save your changes”Save the updated IP policy configuration.
For additional details on IP analysis settings, see the Barracuda IP analysis documentation.
Domain whitelisting
Section titled “Domain whitelisting”Open Sender Policies
Section titled “Open Sender Policies”In Barracuda Email Gateway Defense, navigate to Inbound Settings > Sender Policies.
Add the Jericho sending domain
Section titled “Add the Jericho sending domain”Add the campaign sender addresses or domains confirmed by Jericho Support. Do not assume a single Jericho domain covers every campaign.
Set Intent Domain Policies to Ignore
Section titled “Set Intent Domain Policies to Ignore”Open Inbound Settings > Anti-Phishing > Intent Domain Policies. Add the confirmed simulation link domains with Policy set to Ignore. This is a separate URL policy, not a setting on the sender entry. Use domain names without http:// or https://.
Add campaign-specific domains
Section titled “Add campaign-specific domains”Review the required sending and link domains whenever you change campaigns. An Intent Domain exception also exempts that domain from URL Click Protection; scope it to the confirmed simulation domains.
Save your changes
Section titled “Save your changes”Save the updated sender policy configuration.
For additional details on sender analysis settings, see the Barracuda sender analysis documentation.
See Barracuda’s Intent Domain Policies for the URL exception behavior. An exemption does not guarantee that every other message check is bypassed.