Awareness Training - SMTP and URL Guide

This article lists SMTP addresses and domains that must be allowed for Mimecast Awareness Training, and is intended for Administrators.

Also see Managing Phishing Templates.

Introduction

Specific SMTP addresses and domains must be allowed for Mimecast Awareness Training.
This is because:

• SMTP addresses are used for phishing campaign simulations.
• Domain URLs are used in phishing campaign simulations.

The domain to allowlist for the Mimecast Awareness Training phishing landing page is:

https://*.therelayservice.com/

Mimecast owns this domain.

You maintain your Managed URLs in the Mimecast Administration Console by navigating to Email Security | URL Protection and clicking on URL Tools.

Trusted Sites Configuration

Click here to learn how to configure a Safe Senders list for Mimecast Awareness Training emails, ensuring that images display properly.

Step 1: Add Mimecast Sending Addresses to the Safe Senders List using GPO

1. Create a Safe Senders List File:
2. Create a .txt file containing the sending address(es) you would like to add as Safe Senders (in this case, this would be whichever address you are sending the Training Modules from)

@domain.com
[e-mail]

3. If you wish to do the same for Phishing Campaigns, ensure that you add the sending addresses listed in the article below to the text file as well:

https://mimecastsupport.zendesk.com/hc/en-us/articles/34000445739027-Engage-SMTP-and-URL-Guide#h_01JC0JYXB6TMDBBYWBEB1168E7

4. Save this file in a shared network location accessible to all users.

Configure the GPO

1. Open the Group Policy Management Console (GPMC).
2. Navigate to:

• • User Configuration | Administrative Templates | Microsoft Outlook | Outlook Options | Preferences | Junk Email
  • Enable the policy Specify path to Safe Senders list.
  • Enter the UNC path to the .txt file (e.g., \\ServerName\Share\SafeSenders.txt).

3. Deploy the GPO:

• • Link the GPO to the appropriate Organizational Unit (OU) containing the users.
  • Run gpupdate /force on client machines to apply the policy.

Using Intune

Prepare the Safe Senders List:

1. Create the same .txt file as above.
2. Create a Configuration Profile:

• • Log in to the Microsoft Endpoint Manager Admin Center.
  • Go to Devices | Configuration profiles | Create profile.
  • Select Windows 10 and later as the platform and Templates | Administrative Templates.

3. Configure the Policy:

• • • • Search for "Specify path to Safe Senders list".
      • Enable the policy and provide the path to the .txt file.
      • Assign the Profile. (Assign the configuration profile to the appropriate user or device groups.)

Step 2: Enable Automatic Image Downloads for Safe Senders using GPO

Configure the GPO

1. Open the Group Policy Management Console (GPMC).
2. Navigate to:

• • User Configuration | Administrative Templates | Microsoft Outlook | Outlook Options | Mail Format | HTML Options
  • Enable the policy Automatic Picture Download Settings.
  • Configure the setting to Permit downloads in email messages from Safe Senders and Safe Recipients.

3. Deploy the GPO:

• • Link the GPO to the appropriate OU and apply it.

Using Intune

1. Create a Configuration Profile:

• • Log in to the Microsoft Endpoint Manager Admin Center.
  • Go to Devices | Configuration profiles | Create profile.
  • Select Windows 10 and later as the platform and Templates | Administrative Templates.

2. Configure the Policy:

• • Search for Automatic Picture Download Settings.
  • Enable the policy and configure it to Permit downloads in email messages from Safe Senders and Safe Recipients.
  • Assign the Profile. (Assign the configuration profile to the appropriate user or device groups.)

Step 3: Verify the Configuration

On a Client Machine:

1. Open Outlook and navigate to:

• • Home | Junk | Junk Email Options | Safe Senders
  • Confirm that Mimecast's sending addresses are listed.

2. Test Automatic Image Downloads:

• • Send a test email from a Mimecast address and verify that images are downloaded automatically without user intervention.

Domains

The address to use for setting up Safe Senders/Trusted Sites to allow for automatic downloads of inserted images and [videoposter] in your Mimecast Awareness Training Email Notifications is:

https://s3.amazonaws.com

The following table lists the domains to allow for Mimecast Awareness Training Phishing Campaigns:

account-renewals.com	payroll-updates.com
accountsecuritynotices.com	relaysvc.com
benefits-bulletin.com	salary-info.com
ceo-update.com	secure-corporate-communications.com
company-updates.com	secure-corporate-news.com
corp-accounts.com	secure-corporate-updates.com
corp-news.com	secure.ataata.com
corp-update.com	secureceocommunications.com
corporate-payroll.com	securesecuritysolutions.com
corporate-updates.com	security-bulletin.com
cy-se.com	subscriptionrenewalnotices.com
employee-news.com	subscriptionrenewalservices.com
hookedlikeaphish.com	sysgen-cash.com
info-needed.com	sysgen-payroll.com
payroll-news.com	worldwidenewsupdates.com
	instant-promos.com

Email Addresses

The following email addresses are used for Mimecast Awareness Training Phishing Campaigns:

• [e-mail]
• [e-mail]
• [e-mail] ‐ FOR TEST SYSTEM ONLY

SMTP addresses

The following table lists SMTP addresses that are used for Mimecast Awareness Training Phishing Campaign Simulations.

Template Name	SMTP Address
Payroll	[e-mail]
Promotions	[e-mail]
Shipping	[e-mail]
TrackMyPackage	[e-mail]
BreakingNews	[e-mail]
Reset	[e-mail]
Login	[e-mail]
Survey	[e-mail]
Salary	[e-mail]
Fileshare	[e-mail]
Renewals	[e-mail]
Notification	[e-mail]
Payroll‐News	[e-mail]
Employee‐News	[e-mail]
Corp‐Updates	[e-mail]
Sec‐Solutions	[e-mail]
Subscription‐Renewal	[e-mail]
Payroll‐Gen	[e-mail]
Cash‐Gen	[e-mail]
OneDrive	[e-mail]
CEO‐Update	[e-mail]
Company‐Updates	[e-mail]
Corp‐Update	[e-mail]
Corporate‐Updates	[e-mail]
CyC	[e-mail]
Info	[e-mail]
Payroll‐Update	[e-mail]
Corp‐News	[e-mail]
Subscription‐Notice	[e-mail]
Amazon	[e-mail]