1️⃣ Before you start
This article explains how to allow (whitelist) Riot phishing simulation and training emails in Libraesva, so that they reach your employees' inboxes and clicks are tracked correctly.
First, an essential check: make sure you have admin access (superadmin) to your Libraesva console. If you subscribed to Libraesva through a partner, your rights are often limited: the request will then need to go through your partner (see section 3️⃣).
💡 Prerequisite:
admin access (superadmin) to Libraesva, or a partner able to make the change;
the list of your Riot sending domains, available in Settings > Domains in your Riot workspace.
2️⃣ If you are an admin
👉 Allow the sending domains (whitelist)
👉 Step 1: log in to the Libraesva admin console.
👉 Step 2: go to Admin Area > Content Analysis > Whitelists & BlocksLists.
👉 Step 3: click New to create a new allow rule.
👉 Step 4: in the From Address/Sender field, enter the Riot sending domains (found in Settings > Domains in your Riot workspace).
👉 Step 5: do not tick the Check Envelope Only box, so that the system checks both the envelope and the header: the allow rule is more reliable.
⚠️ Important: leave the Check Envelope Only box unticked.
👉 Bypass URL analysis (URL Sandbox)
👉 Step 6: go to Content Analysis > Sandbox Filters, URLSand > Exceptions > New tab, then add your domain in both forms: *.yourdomain.com/* and yourdomain.com.
👉 Save and test
👉 Step 7: click Save/Apply. Then send a test campaign to 2 or 3 users to confirm that the emails arrive in the inbox and that clicks are tracked correctly.
👍 Good to know: changes can take up to 10 minutes to apply. Always test on 2 or 3 users before launching a larger-scale campaign.
3️⃣ If you are not an admin
If you don't have superadmin rights (common when Libraesva was subscribed through a partner), pass the request on to your partner or your IT team. You can use the template below.
"Hello,
I would like to request the allowing (whitelisting) of our sending domains on our Libraesva ESG gateway. These domains are used to send phishing simulation and training emails:
(enter here the domains listed in Settings > Domains in your Riot workspace)
Could you please:
allow them as senders in the Whitelists & BlocksLists section (From Address/Sender field), so that the emails pass the security filters;
also add these domains to the URL sandbox exception rule (Content Analysis > Sandbox Filters > URLSand > Exceptions), to prevent training links from being blocked or delayed.
Please don't hesitate to contact me if you need any further information.
Thank you in advance and kind regards."
Key takeaways
First check whether you are a Libraesva admin (superadmin). If not, the request goes through your partner.
Allow your Riot sending domains in Whitelists & BlocksLists, without ticking Check Envelope Only.
Also add these domains to the URLSand exceptions to prevent links from being blocked or slowed down.
Allow up to 10 minutes for changes to propagate, then test on 2 or 3 users.