Comprehensive Whitelisting in Microsoft Defender for Office 365

1. Safe Links Whitelisting:

   • Access Microsoft 365 Defender Portal:
     • Go to the Microsoft 365 Defender portal: Microsoft 365 Defender.
     • Sign in with your admin credentials.
   • Navigate to Safe Links:
     • Go to Policies & rules > Threat policies > Safe Links.
   • Edit Safe Links Policy:
     • Select the policy you want to modify and click on Edit policy.
     • Do not rewrite URLs:
       • In the policy settings, find the section for Do not rewrite the following URLs.
       • Click + Add and enter the URLs you want to whitelist.
       • Save the changes.

2. Safe Attachments Whitelisting:

   • Navigate to Safe Attachments:
     • Go to Policies & rules > Threat policies > Safe Attachments.
   • Edit Safe Attachments Policy:
     • Select the policy you want to modify and click on Edit policy.
     • Enable Bypass:
       • In the policy settings, find the section for Bypass.
       • Click + Add and enter the email addresses, domains, or IP addresses you want to whitelist.
       • Save the changes.

3. Anti-Spam Policy Whitelisting:

   • Navigate to Anti-Spam Policies:
     • Go to Policies & rules > Threat policies > Anti-spam.
   • Edit Anti-Spam Policy:
     • Select the policy you want to modify and click on Edit policy.
     • Allowed Domains and Addresses:
       • In the anti-spam policy settings, find Allowed domains and addresses.
       • Click + Add and enter the domains or email addresses you want to whitelist.
       • Save the changes.

4. Connection Filter Policy Whitelisting:

   • Navigate to Connection Filter Policies:
     • Go to Policies & rules > Threat policies > Connection filter policy.
   • Edit Connection Filter Policy:
     • Click on the Default policy (or create a new policy if preferred).
     • IP Allow List:
       • In the Connection filtering settings, find IP Allow list.
       • Click + Add to add the IP address you want to whitelist.
       • Save the changes.