Engage - Simulations Via Microsoft Advanced Delivery

This article explains how to configure Microsoft Advanced Delivery for Engage, to ensure phishing simulations and associated data are not affected by Microsoft’s Advanced Delivery function, which may show users as having clicked on simulation reports. It is intended for Administrators.

You must complete all of the steps below. Ensure you've added the Mimecast sending domain, entered the Sending IPs, and entered the Simulation URL(s).

Prerequisites

• You have ensured that the required SMTP addresses and domains that are required for Engage have been allow listed. See SMTP and URL Guide (this should have already been done as part of yourEmail Security Cloud Gateway installation).

Configuring Microsoft Advanced Delivery

You can configure Microsoft Advanced Delivery, so that it doesn't affect your Engage Phishing simulations and associated data, by using the following steps:

1. Open the Microsoft 365 Defender portal. (https://security.microsoft.com)
2. Navigate to Email & Collaboration | Policies & Rules | Threat policies | Rules | Advanced Delivery.
3. Open the Phishing Simulation tab. 
4. Click Add to configure a new simulation or Edit if you already have settings to Add or Edit your Simulation settings.
   
5. Add the Mimecast sending domain which you wish to send simulations from. Up to 50 domains are allowed, so only enter what you require.
   
6. Enter the Sending IPs based on your hosting jurisdiction from Data Centers & URLs.
   
7. Enter the Simulation URL(s) by adding the URL for each landing page domain you wish to use. Mimecast uses therelayservice.com for multi-stage simulations and landing pages.
   
   
   

   Due to a Microsoft limitation on the number of entries allowed, you may need to consolidate some IP ranges into larger masks.

8. To Save your settings, click Add (or Save if editing an existing config). There may be a delay in these configurations taking effect. We highly recommend you send a test phishing email to check that the Advanced Delivery configuration is working before rolling it out company-wide.

Consolidated Sending IP Ranges

Here are the consolidated Sending IP Ranges, by region:

UK Grid IP Ranges 193.7.204.0/23 195.130.217.0/24 91.220.42.0/24 185.58.84.0/22 207.82.80.0/24	DE Grid IP Ranges: 51.163.158.0/23 62.140.7.0/24 62.140.10.0/24 147.28.34.0/23 147.28.37.0/24 194.104.108.0/22	US-A Grid IP Ranges 170.10.128.0/22 170.10.132.0/23 207.211.30.0/23 205.139.110.0/23 216.205.24.0/24 63.128.21.0/24
US-B Grid IP Ranges 170.10.150.0/23 170.10.152.0/22 170.10.156.0/23	CA Grid IP Ranges 170.10.144.0/22 170.10.148.0/23 216.145.216.0/24	ZA Grid IP Ranges 41.74.192.0/20
AU Grid IP Ranges 103.96.20.0/22 170.10.134.0/23 103.13.69.0/24 124.47.150.0/24 124.47.189.0/24 180.189.28.0/24 216.145.217.0/24	JER Grid IP Ranges 193.7.206.0/23 147.28.32.0/23 213.167.75.0/24 213.167.81.0/24