Allow Jericho simulations in Mimecast

Mimecast protection layers can affect simulation delivery and tracking. Confirm the current sending IPs, sender domains, and simulation URLs with Jericho Support before creating exceptions. A permitted-sender rule does not configure every protection layer.

URL protection bypass

1. In Mimecast Administration Console, open Policies > Gateway Policies.
2. Select URL Protection Bypass, then New Policy.
3. Identify the policy in Policy Narrative and choose the appropriate definition in Select Option.
4. Scope Emails From to the confirmed simulation senders and Emails To to your intended recipients.
5. Set Source IP Ranges to the confirmed sending CIDRs. Review validity dates and precedence with your mail administrator.
6. Select Save and Exit and test a pilot message.

Both in Addresses Based On means either the envelope sender or header sender may match. It does not require both identities to match. Do not apply an unrestricted everyone-to-everyone bypass.

See Mimecast’s URL Protect bypass policy instructions.

Managed URLs

Open Email Security > URL Protection > URL Tools > Managed URLs. For confirmed simulation URLs, review Override Type, Match Type, and the rewriting controls before saving. Merely adding a URL does not specify the intended allow/rewrite behavior.

Mimecast’s published description of Disable Rewriting For This Entry is internally inconsistent. Confirm its effective behavior in your console with Mimecast Support and a pilot message. See Managed URLs.

Other protection layers

Use only the exceptions required by your campaign and existing policies:

• Permitted Senders for applicable sender/spam checks.
• Attachment Protection Bypass for attachment simulations affected by Attachment Protect. Scope the exception to the confirmed senders and recipients; allow propagation time before retesting.
• Review attachment-management, impersonation, or greylisting exceptions with your mail administrator only when those controls interfere with the pilot.

Do not enable every bypass or Policy Override by default. Follow Mimecast’s Attachment Protect bypass instructions and policy types reference for the controls present in your account.