Configuring Harmony Email & Collaboration (formerly Avanan) with Phin Security
If using Avanan, admins may need to configure their Avanan instance to accommodate Phin IPs, URLs, and domains.
You may need to configure Microsoft 365 and/or Google Workspace so that messages from Phin can be delivered successfully. This may involve creating a mail flow rule in the Exchange admin center that will look for Phin IP addresses and add a header that lets Avanan know that the email is safe.
If you have any issues, please contact the Harmony (Avanon) support team.
Sample Setup
This is a sample set up as client configurations can vary greatly. Please contact Harmony (Avanan) if you have any questions about their platform.
1. Security Settings / Security Engines / Smart-Phish (click “Configure”)
-
- Populate: “Except when coming from domains” with:
- phinsecurity.com,betterphish.com,shippingalerts.com,amazingdealz.net,berrysupply.net,coronacouncil.org,couponstash.net,creditsafetyteam.com,autheticate.com,notificationhandler.com
2. Anti-Phishing – Create Allow-List entry for IPs as Server IP entries
-
- Phishing email IPs:
- 198.2.177.227
- 198.244.59.179
- 35.237.125.73
- Reminders: 198.2.178.214
- Phishing email IPs:
- Populate: “Except when coming from domains” with:
-
-
- (Optional) – add domains as “Sender Domain Allow-List)
- phinsecurity.com
- betterphish.com
- shippingalerts.com
- amazingdealz.net
- berrysupply.net
- coronacouncil.org
- couponstash.net
- creditsafetyteam.com
- autheticate.com
- notificationhandler.com
- (Optional) – add domains as “Sender Domain Allow-List)
-
-
- Click-Time – Add all domains to the Allow-List
- phinsecurity.com
- betterphish.com
- shippingalerts.com
- amazingdealz.net
- berrysupply.net
- coronacouncil.org
- couponstash.net
- creditsafetyteam.com
- autheticate.com
- notificationhandler.com
- Click-Time – Add all domains to the Allow-List
-
- Click-Time – Add all domains to the Ignore-List
- phinsecurity.com
- betterphish.com
- shippingalerts.com
- amazingdealz.net
- berrysupply.net
- coronacouncil.org
- couponstash.net
- creditsafetyteam.com
- autheticate.com
- notificationhandler.com
- Click-Time – Add all domains to the Ignore-List
3. Anti-Spam – Add all domains as Trusted Sender/Domain. Check “All recipients” for each entry.
-
-
- phinsecurity.com
- betterphish.com
- shippingalerts.com
- amazingdealz.net
- berrysupply.net
- coronacouncil.org
- couponstash.net
- creditsafetyteam.com
- autheticate.com
- notificationhandler.com
-
-
- URL Reputation – add all domains as trusted domains Allow-List
- phinsecurity.com
- betterphish.com
- shippingalerts.com
- amazingdealz.net
- berrysupply.net
- coronacouncil.org
- couponstash.net
- creditsafetyteam.com
- autheticate.com
- notificationhandler.com
- URL Reputation – add all domains as trusted domains Allow-List
Resources
Microsoft exchange online Mail Flow Rules