Phin Security

December 2024 Release Notes 3.17

The December 2024 Release Notes 3.17 announce Microsoft Automated Allowlisting enhancements including automatic syncing of allowlisting changes with Microsoft environments, updated mailflow rules to bypass spam filters for Phin emails by setting spam confidence level to -1, a new rule for emails with the X-PHIN-CUSTOM header, and a critical update requiring partners to update allowlisted IPs by January 6, 2025 to ensure continued delivery of simulated phishing emails.

December's Release: Microsoft Automated Allowlisting Updates

We've received an enthusiastic response to our Microsoft Automated Allowlisting feature, with over 1,000 companies enabling it within two weeks of its release. Thank you for your feedback and support!

Important Updates

  1. 1.

    Auto-Sync for Allowlisting Changes

    • Any additions to automated allowlisting (such as added domains, URLs, or rules) will now be automatically synced with connected Microsoft environments. This removes the need to re-run the integration once it is enabled.
  2. 2.

    Rule Changes

    • Bypass Focused Inbox and Spam Filter for Phin: The previous 'Bypass Focused Inbox for Phin' rule in Mailflow > Rules (Exchange admin center) has been updated. It now also bypasses the spam filter by setting the spam confidence level (SCL) to -1 on Phin emails, ensuring they are not marked as spam during delivery.
    • Set SCL for X-Phin-CUSTOM Header: A new rule will be added to Mailflow > Rules when Automated Allowlisting is run. This rule looks for emails with the X-PHIN-CUSTOM header and sets the SCL to -1, ensuring these emails are not marked as spam. If a custom header has already been generated in Settings > Sending Settings, it will be used; otherwise, Phin will generate one when automated allowlisting is run.

Updated IPs (Allowlisting)

Action Required: Phin Security has updated its email service provider and IP addresses. All partners must update their allowlisted IPs for all clients by January 6, 2025 to continue sending simulated phishing emails. Failure to update allowlists will result in failed delivery.

For full details and instructions on updating allowlists using the new integration, refer to the November 2024 release notes and the Microsoft Automated Allowlisting guide.

Knowledge Base

Phin updates the Knowledge Base with new features in every release. You can read about the platform and its updates at: https://www.phinsec.io/knowledge

Thank you for using our product! Your feedback helps shape the future of Phin. Please continue to share your ideas and suggestions.

The Dev Team @ Phin

Need help or have an idea for us? Submit a ticket through the Knowledge Base.