Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Sky ATP Email Management: Allowlist and Blocklists

 

Access this page from Configure > Threat Prevention > Sky ATP Email Management and choose either the Whitelist or Blacklist tab.

Use custom blocklists and allowlists to filter email attachments.

  • Read the Sky ATP Email Management Overview topic.

  • Compile a list of known malicious email addresses or domains to add to your blocklist. If an email matches the blocklist, it is considered to be malicious and is handled the same way as an email with a malicious attachment, blocked and a replacement email is sent. If an email matches the allowlist, that email is allowed through without any scanning.

  • It is worth noting that attackers can easily fake the “From” email address of an email, making blocklists a less effective way to stop malicious emails.

The procedure for adding addresses to blocklists and allowlists is the same, although the results are very different. Be sure you are adding the entry to the correct list.

  1. Select Configure > Threat Prevention > Sky ATP Email Management and choose either the Whitelist or Blacklist tab.
  2. Select a Sky ATP realm and click the + sign to add a new entry.
  3. In the Email Sender field, enter the full address in the format name@domain.com or wildcard the name to permit or block all emails from a specific domain. For example, *@domain.com.
  4. Click OK.