Allow Jericho Security simulations in Microsoft 365

Use Advanced delivery for Jericho email simulations. Reporting a false positive is not a substitute for this policy and does not guarantee a permanent allow entry.

Confirm your campaign values

For standard Amazon SES delivery, use the dedicated sending IPs. Confirm the campaign’s MAIL FROM or DKIM domain with Jericho Support. Do not substitute the visible From address or assume an old IP list is current.

Configure Advanced Delivery

1. Open Microsoft Defender.
2. Select Phishing simulation, then Add (or Edit for an existing configuration).
3. Under Domain, enter the confirmed MAIL FROM or DKIM domain.
4. Under Sending IP, enter the confirmed sending IPs or CIDRs. Both a domain and an IP match are required.
5. Save the configuration and send a pilot simulation to designated test recipients.

Simulation URLs to allow is optional for non-email simulations; it is not required for links in email simulations. Safe Links may still wrap URLs. This policy does not bypass malware filtering for simulation messages.

If a gateway precedes Microsoft 365, confirm the mail-routing requirements with your mail administrator before testing.

See Microsoft’s Advanced Delivery instructions for required permissions and routing details.