Whitelisting IP/Domain on ESA will skip security checks?

[bsrinu001]

Hi Team,

If we white listed IP/Doamin will skip Antivirus, Antispam/Greay mail, Ourbreak checks? 

will also skip SBRS score? please clarify. Many Thanks 

[Libin Varghese]

IP/FQDN added to HAT Whitelist can be used to bypass SBRS, anti-spam, anti-virus as per the configuration of the mail flow policies.

In order to bypass other scanning engines you would need to implement message filters or create a separate incoming mail policy for the sender/recipient domain or email address with the scanning features disabled as per requirement.

SBRS is checked at the connection level HAT, so skipping SBRS can only be accomplished at HAT.

Regards,
Libin Varghese

[bsrinu001]

Hi,
Is SBRS will be skipped at senders group completely? also white listing will skip all security scans please clarify, mail flow and polices in general. Many Thanks

[Libin Varghese]

The HAT Sendergroups can be edited to include or exclude SBRS checks, if SBRS check is excluded it would skip SBRS check completely.

HAT sendergroups are linked to mail flow policies (Trusted, Accept, etc) which can be configured to skip only anti-spam and anti-virus.

Other scanning engines cannot be controlled by HAT/mail flow policies.

Scanning engines such as graymail, AMP, outbreak filters can only be controlled after HAT using message filters or incoming mail policies.

Regards,

Libin Varghese