Configuring Advanced Delivery Policy for KnowBe4

ITS STAFF ONLY

Note: Please refer to Configure the delivery of third-party phishing simulations to users for more details and instructions

Configure Advanced Delivery Policies

Note: These instructions are from How to Use Advanced Delivery Policies in Microsoft 365

1. Security Team must approve any changes
2. Log into the Defender portal as an administrator
3. Click Email & Collaboration
4. Click Policies & rules
5. Click Threat policies 
6. Click Advanced delivery in the Rules section
7. Click Phishing simulation tab
8. Click Edit
   Note: Click Add if there are no existing policies
9. Add psm.knowbe4.com to Sending Domain
10. Add 3 Sending IPs
    • 147.160.167.0/26
    • 23.21.109.197
    • 23.21.109.212
11. ​​​Add the root domain for up to 10 Simulation URLs to allow
12. Click Save

Limit KnowBe4 Simulation URLs

Note: These instructions are from Phishing Domain Management 

1. Security Team must approve any changes
2. Log into the KnowBe4 Dashboard as an administrator
3. Click Phishing
4. Click Domains
5. Hide all but the 10 domains you listed above

Configure Spoof Intelligence Allow/Block List

Note: These instructions are from How to Use Spoof Intelligence Allow/Block List for Microsoft Defender

1. Security Team must approve any changes
2. Log into the Defender portal as an administrator
3. Click Policies & rules
4. Click Threat policies
5. Click Tenant Allow/Block Lists
6. Click Spoofing 
7. Click Add
8. Add new domain pair *, psm.knowbe4.com
9. Select Internal for Spoof type
10. Select Allow for Action
11. Click Add