Open a support case, refer to the ongoing issue and provide the IPs therein.
Answer from Vasil Michev on learn.microsoft.comHow can I whitelist an address in Office365 for my entire organization?
Whitelisting IP Address
MFA and Whitelisted IPs
Is it safe to whitelist public IP in Office 365 Antispam policy?
Videos
Open a support case, refer to the ongoing issue and provide the IPs therein.
Hi @Mike Bews
Welcome to our forum!
Please note that this is a public forum, please note that your personal privacy is covered, thank you for your understanding!
Which is a known issue, if you are the administrator, you can search EX680695 in the Dashboard and check the latest update of the issue. Some users reported that this problem has been solved. If the problem still exists, please wait patiently.
Hope this helps!
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
It’s actually under Policies & Rules > Threat Policies > Anti-spam policies > Anti-spam inbound policy (Default). In the fly-out, scroll all the way to the bottom and click the “edit allowed and blocked senders and domains”.
I have a vendor that has now switched to a third party email service, and I need whitelist the email address they will be using going forward. When I go into Exchange Admin Center > Mail Flow > Rules > + Add a Rule, the Bypass Spam Filter option is not there. Does anyone know why this is?
I need to add the address, so if I can’t add it that way, then how?
Thanks!
Question as I am having no luck finding the answer. Probably because I am using the wrong terminology.
We are enabling MFA across the org and doing so by having some accounts whitelisted for MFA. My understanding is that MFA will never actually enable unless the account is logged into, outside of the IP, to trigger the MFA prompt. This obviously defeats the purpose because if the account is breached, the breaching party will get prompted to setup MFA.
Is there a way, like there was in O365 MFA (Disable > Enable > Enforce), to have Azure trigger MFA without needing to log into the account? It wouldn't make sense for an auth app obviously, but we could tie it to a central secure phone line or an admin email.
Any assistance appreciated.
Hi everyone,
A survey company is going to send hundreds of emails to users in my company. They suggested to whitelist their email (which I did) and whitelist their public IP addresses in Office 365 Antispam policy -Connection filter policy (which I hesitate to do).
Do you think it’s safe to whitelist public IP in Office 365 Antispam policy?
Thank you.
Huyan
My rule of thumb is I dont.
Whitelisting means it skips a lot of checks and that you trust the other company to not be malicious. Everyone gets compromised at one point. I only would add it if messages start getting stopped. Even then I create a custom rule, not whitelist, you can make it so lowers the spam score but still does all the scanning it needs.