Configuring Avanan with Phin Security

If using Avanan, admins may need to configure their Avanan instance to accommodate Phin IPs, URLs, and domains.

You may need to configure Microsoft 365 and/or Google Workspace so that messages from Phin can be delivered successfully. This may involve creating a mail flow rule in the Exchange admin center that will look for Phin IP addresses and add a header that lets Avanan know that the email is safe.

If you have any issues, please contact the Avanan support team.


Sample Setup

This is a sample set up as client configurations can vary greatly. Please contact Avanan if you have any questions about their platform.

Security Settings / Security Engines / Smart-Phish (click “Configure”)

    • Populate: “Except when coming from domains” with:
      • phinsecurity.com,betterphish.com,shippingalerts.com,amazingdealz.net,berrysupply.net,coronacouncil.org,couponstash.net,creditsafetyteam.com,autheticate.com,notificationhandler.com
  • Security Settings / Exceptions
    • Anti-Phishing – Create Allow-List entry for IPs as Server IP entries (add comment to keep track of them)
      • Phishing email IPs:
        • 198.2.177.227
        • 198.244.59.179
        • 35.237.125.73
      • Reminders: 198.2.178.214
      • (Optional) – add domains as “Sender Domain Allow-List)
        • phinsecurity.com
        • betterphish.com
        • shippingalerts.com
        • amazingdealz.net
        • berrysupply.net
        • coronacouncil.org
        • couponstash.net
        • creditsafetyteam.com
        • autheticate.com
        • notificationhandler.com

    • Click-Time – Add all domains as an Allow-List
      • phinsecurity.com
      • betterphish.com
      • shippingalerts.com
      • amazingdealz.net
      • berrysupply.net
      • coronacouncil.org
      • couponstash.net
      • creditsafetyteam.com
      • autheticate.com
      • notificationhandler.com
    • Anti-Spam – Add all domains as Trusted Sender/Domain.  Check “All recipients” for each entry.
      • phinsecurity.com
      • betterphish.com
      • shippingalerts.com
      • amazingdealz.net
      • berrysupply.net
      • coronacouncil.org
      • couponstash.net
      • creditsafetyteam.com
      • autheticate.com
      • notificationhandler.com
    • URL Reputation – add all domains as  trusted domain Allow-List
      • phinsecurity.com
      • betterphish.com
      • shippingalerts.com
      • amazingdealz.net
      • berrysupply.net
      • coronacouncil.org
      • couponstash.net
      • creditsafetyteam.com
      • autheticate.com
      • notificationhandler.com

Resources
Microsoft exchange online Mail Flow Rules

Google Workspace