Advanced Delivery Policies in Microsoft Defender for Office 365 (ADP) Setup Guide

Step 1: Obtain the whitelisting information

• Log into your Tartan account
• Navigate to Phishing Campaign
• Select the Microsoft ADP (Recommended) option under the Email delivery method section
• Information for copying will be in the appeared tables

Step 2: Configure ADP in Microsoft Defender

1. Access Microsoft Defender
   • Log into your Microsoft Defender with an administrator account
2. Navigate to Threat Policies
   • On the left menu expand the Email & collaboration section
   • Press the Policies & Rules option, in the opened page choose Threat Policies
3. Access Advanced Delivery
   • Under the Rules section choose Advanced delivery
   • Select the Phishing simulation tab
   • Select Edit: a modal with title Edit third party phishing simulations will open
4. Fill in the Configuration Details
   • The domains provided under Phishing simulation domains
   • The IP addresses provided under Sending IP
   • The Simulation URLs provided under Phishing simulation URLs

   Important: URL Format

   URLs should be rewritten following this format: https://my.tartan.app/ → *.tartan.app/*

5. Save Configuration
   • Click Save to finish the process
   • It may take some time (up to 2 hours) for changes to take effect

Step-by-Step Setup Guide

1. Access Microsoft Defender
   • Log into your Microsoft Defender with an administrator account
2. Navigate to Safe Links
   • On the left menu expand the Email & collaboration section
   • Press the Policies & Rules option, in the opened page choose Threat Policies
   • Under the Policies section choose Safe Links
3. Create New Policy
   • Select Create to add a new policy
   • Give the policy a name and description, so you can identify it in case you need to make changes in future
   • Press Next to continue
4. Add Organization Domains
   • Add your organization's domain(s) in the input titled Domains
   • Press Next
5. Configure Safe Links Settings
   • Make sure to make active the checkbox "On: Safe Links checks a list of known, malicious links when users click links in email. URLs are rewritten by default"
   • Click the Manage 0 URLs under the Do not rewrite the following URLs in email (0) on the same step
6. Add Tartan URLs
   • You will now have to add URLs shown in the Phishing simulation URLs table in Tartan

   Important: URL Format

   URLs should be rewritten following this format: https://my.tartan.app/ → *.tartan.app/*

7. Add Each URL
   • For each email present in the URLs table, select Add URLs on the Microsoft page
   • Enter the URL
   • Click Save