Whitelist by Email Header in Exchange 2010

This article will cover how to allow phishing emails to reach the targets by whitelisting the Email Header in Exchange 2010 environment.

If you're using a cloud-based spam filter,  whitelisting by headers may be the most suitable way to ensure phishing test emails are delivered to phishing targets. Make sure you also whitelist our IPs in your spam filter.

Remember to set up a test phishing campaign to yourself or a small group after you follow the below steps to ensure your whitelisting was successful. The setting may take up to an hour to propagate to all users so wait at least an hour before testing.

Follow the below instructions for adding the rule to allow list by email header.

1. Open your Microsoft Exchange Management Console (EMC) on your Microsoft Exchange server (see the below image - your Hub Transport listing may already have rules listed depending on your installation and environment).
2. Expand Organization Configuration in the left-hand menu tree, and select Hub Transport.
3. Under Actions on the right-hand side, select New Transport Rule.
4. Enter a name for your New Transport Rule, for example, "Bypass spam filtering by PhishGuard email header", and click Next.
5. In the "Step 1:" section of the dialog window, select the "when the message header contains specific words" checkbox and complete the following steps in the "Step 2:".
   a. Select message header and type in PhishGuard header.   b. Select specific words and then enter the header value in PhishGuard header.
6. Once completed, your Conditions will appear as you set them. 
7. In "Step 1:", select "set the spam confidence level to a value". 
8. In "Step 2:", select the number shown for the spam confidence level (SCL) and change this to to -1, then click OK and then Next>.
9. There is nothing to complete on the Exceptions page so just click Next>.
10. On the Create Rule page, select New to continue.
    
11. If the Wizard successfully created your rule, the dialog box will display a summary of the rule input you entered. 
12. Click Finish to continue.
13. Once the dialog box closes, you should now see the new rule in the Hub Transport list.