Whitelisting PhishGuard in Barracuda

In this article you will find the instructions for whitelisting PhishGuard in third party software, Barracuda.

Whitelisting by IP in Barracuda in Email Security Gateway

1. Log in to your Barracude Email Security Gateway web interface.
2. Go to the BLOCK/ACCEPT > IP Filters page.
3. In the Allowed IP/Range section, enter the first IP address in the IP/Network Address field.
4. In the Netmask field, type 255.255.255.255
5. Optional: add a note in the Comment field. For example, type  Phishing IP address
6. Click Add to safelist the entered IP address.
7. Complete steps 2-6 for each of our IP address.

 Barracuda Intent Analysis

You may need to whitelist us in Barracuda's Intent Analysis feature to prevent the URLs in simulated phishing tests from being altered, and potentially resulting in skewed phishing test results. See this article from Barracuda explaining this process

If you are using Barracuda's Email Security Service (cloud), follow these steps to whitelist Barracuda's Intent Analysis:

1. Log in to your Barracuda Cloud Control.
2. Navigate to Email Security > Inbound Settings > Anti-Phishing.
3. Under the Intent section, add PhishGuard domains. Make sure the Policy drop-down is set to Ignore.

If you are using Barracuda's Email Security Gateway (on-premises), follow these steps to whitelist Barracuda's Intent Analysis:

1. Log in to your Barracuda Email Security Gateway web interface.
2. Navigate to Email Security Gateway > Basic > Spam Checking.
3. Under the Intent Analysis section, PhishGuard domains to the URI Exemptions: text box field.

Barracuda Sender Authentication

If you'd like to spoof your own domain in simulated phishing tests, you can exempt Trusted Forwarder IP addresses from SPF checks. See this article from Barracuda for more information.

If you are using Barracuda's Email Security Service (cloud), follow these steps to whitelist Barracuda's Sender Authentication:

1. Log in to your Barracuda Cloud Control.
2. Navigate to Email Security > Inbound Settings > Sender Authentication.
3. In the Use Sender Policy Framework center enter our IP addresses in the SPF exemptions table.

If you are using Barracuda's Email Security Gateway (on-premises), follow these steps to whitelist Barracuda's Sender Authentication:

1. Log in to your Barracuda Email Security Gateway web interface.
2. Navigate to Email Security > Block/Accept tab and select Sender Authentication.
3. Under Sender Policy Framework (SPF) Configuration section, select Yes.
4. Add the our IP addresses to the exemption list.

Barracuda Advanced Threat Protection (ATP) 

If you are using Barracuda's Advanced Threat Protection (ATP) and have experienced false clicks or false attachment opens, you can set up exemptions. Setting up exemptions allows you to bypass PDF scanning for phishing test emails from PhishGuard's IP addresses. 

To set up exemption addresses to bypass ATP PDF Scanning:

1. Log in to your Barracuda Email Security Gateway web interface.
2. Select the ATP Settings tab.
3. Enter the our IP addresses.
4. Click Add.