Email Server Whitelisting: Directions for Barracuda

Here are the steps to whitelisting the above IP addresses in Barracuda:

1. Add an IP address to your whitelist
   1. If you are using Barracuda's Email Security Service (cloud), follow these steps to whitelist Barracuda by IP address
   1. Log in to your Barracuda Cloud Control.
   2. Go to Email Security > Inbound Settings > IP Address Policies.
   3. In the IP Blocking / Exemption section, enter one of the IP addresses from the list above in the IP/Network Address field.
   4. In the Netmask field, type 255.255.255.255
   5. If you'd like, add a note in the Comment field.
   6. Click Add to whitelist the IP address.
   7. Complete steps 1.a.b through 1.a.f for each of the IP addresses above
   2. If you are using Barracuda's Email Security Gateway (on-premises), follow these steps to whitelist Barracuda by IP address
      1. Log in to your Barracuda Email Security Gateway web interface.
      2. Go to the BLOCK/ACCEPT > IP Filters page.
      3. In the Allowed IP/Range section, enter the first KnowBe4 mail server IP in the IP/Network Address field.
      4. In the Netmask field, type 255.255.255.255
      5. If you'd like, add a note in the Comment field.
      6. Click Add to whitelist the IP address
      7. Complete steps 1.b.b through 1.b.f for each of the IP addresses above
2. Exempt trusted forwarder IP addresses from SPF checks. This helps when spoofing your own domain
   1. If you are using Barracuda's Email Security Service (cloud)
   1. Log in to your Barracuda Cloud Control
   2. Navigate to Email Security > Sender Authentication
   3. In the Use Sender Policy Framework center enter our IP addresses in the SPF exemptions table
   2. If you are using Barracuda's Email Security Gateway (on-premises)
      1. Log in to your Barracuda Email Security Gateway web interface
      2. Navigate to Email Security > Block/Accept tab and select Sender Authentication
      3. Under Sender Policy Framework (SPF) Configuration section, select Yes
      4. Add the IP addresses above to the exemption list
3. Bypass sPDF scanningIf you use Barracuda’s Advanced Threat Protection (ATP) and have experienced false attachment opens you can set up exemptions to bypass sPDF scanning for BrightArrow IPs
   1. Log in to your Barracuda Email Security Gateway web interface
   2. Select the ATP Settings tab
   3. Enter the IP address(es) and Subnet Mask(s)
   4. Click Add
4. Email gettechsupport@brightarrow.com to let us know. We will add you to our list so we can notify you when we add servers.