Avanan

If using Avanan, admins may need to configure their Avanan instance to accommodate Phin IPs, URLs, and domains.

You may need to configure Microsoft 365 and/or Google Workspace so that messages from Phin can be delivered successfully. This may involve creating a mail flow rule in the Exchange admin center that will look for Phin IP addresses and add a header that lets Avanan know that the email is safe.

If you have any issues, please contact the Avanan support team.


Sample Setup

This is a sample set up as client configurations can vary greatly. Please contact Avanan if you have any questions about their platform.

Security Settings / Security Engines / Smart-Phish (click “Configure”)

    • Populate: “Except when coming from domains” with:
      • phinsecurity.com,betterphish.com,shippingalerts.com,amazingdealz.net,berrysupply.net,coronacouncil.org,couponstash.net,creditsafetyteam.com,autheticate.com,notificationhandler.com
  • Security Settings / Exceptions
    • Anti-Phishing – Create Allow-List entry for IPs as Server IP entries (add comment to keep track of them)
      • 198.2.177.227 – Comment:  Phin Security (Phishing)
      • 198.2.178.214 – Comment:  Phin Security (Reminders)
      • (Optional) – add domains as “Sender Domain Allow-List)
        • phinsecurity.com
        • betterphish.com
        • shippingalerts.com
        • amazingdealz.net
        • berrysupply.net
        • coronacouncil.org
        • couponstash.net
        • creditsafetyteam.com
        • autheticate.com
        • notificationhandler.com

    • Click-Time – Add all domains as an Allow-List
      • phinsecurity.com
      • betterphish.com
      • shippingalerts.com
      • amazingdealz.net
      • berrysupply.net
      • coronacouncil.org
      • couponstash.net
      • creditsafetyteam.com
      • autheticate.com
      • notificationhandler.com
    • Anti-Spam – Add all domains as Trusted Sender/Domain.  Check “All recipients” for each entry.
      • phinsecurity.com
      • betterphish.com
      • shippingalerts.com
      • amazingdealz.net
      • berrysupply.net
      • coronacouncil.org
      • couponstash.net
      • creditsafetyteam.com
      • autheticate.com
      • notificationhandler.com
    • URL Reputation – add all domains as  trusted domain Allow-List
      • phinsecurity.com
      • betterphish.com
      • shippingalerts.com
      • amazingdealz.net
      • berrysupply.net
      • coronacouncil.org
      • couponstash.net
      • creditsafetyteam.com
      • autheticate.com
      • notificationhandler.com

Resources
Microsoft exchange online Mail Flow Rules

Google Workspace