Some email filters, including Microsoft Defender for Office 365 and Mimecast, hold these emails or show a warning on the link. This guide shows your IT team how to allow them.
A) WHAT TO ALLOW
Type | Value | Why |
Sender Address | Sends invitation and verification emails | |
Sender Domain | verifime.com | SPF, DKIM and DMARC pass and align for this domain |
Link Domain | portal.verifime.com | Every invitation and verification link opens here |
Emails you will see from us:
1. "[Organisation] needs you to verify your identity"
2. "Verify your email address for [Organisation], valid until [time]"
B) MICROSOFT DEFENDER FOR OFFICE 365
Use Step 1 (nb Steps 2 and 3 are only for messages already held)
1. Allow the link domain through Submissions (preferred option)
This overrides every verdict up to malware. A direct list entry does not
a) Open security.microsoft.com/reportsubmission?viewid=url.
b) Select Submit to Microsoft for Analysis
c) URL: portal.verifime.com. Select "I've confirmed it's clean."
d) Select "Allow this URL". Set "Remove allow entry after" to "45 days after last used date".
e) Submit. The entry appears in the Tenant Allow/Block List under "URLs" and is active within about 5 minutes.
2. Release held messages
a) Open security.microsoft.com/quarantine
b) Filter by sender [email protected]
c) Release them to the recipients.
3. Allow the sender
a) In Submissions, under "Emails", select "Submit to Microsoft for analysis" for a held VerifiMe message.
b) Select "I've confirmed it's clean", then "Allow this message". This creates allow entries for the sender and for the link.
Defender Notes
*A plain allow entry such as verifime.com matches only that exact host. Enter portal.verifime.com as shown.
*Do not enter *verifime.com (no dot). Microsoft lists this format as invalid.
*Microsoft describes the Tenant Allow/Block List as its allow list for URLs everywhere, so the URL allow entry also applies when a user clicks the link in Microsoft Teams. Safe Links "Do not rewrite" lists, do not apply in Teams.
C) MIMECAST
Menu names can differ slightly between Mimecast console versions.
1. Permit the link
Go to Targeted Threat Protection, URL Protect, Managed URLs. Add "portal.verifime.com" with action Permit and match type Domain.
2. Permit the sender
Go to Administration, Gateway, Policies, Permitted Senders, and select New Policy. Set Emails From to "[email protected]". Create a new policy; do not edit the default one.
3. Release held messages from the held messages queue.
D) OTHER FILTERS
Allow the sender domain "verifime.com" and the URL domain "portal.verifime.com". We publish SPF, DKIM and DMARC for "verifime.com", so authentication-based allow rules work.
Contact - [email protected] OR +61 72087799 (Monday to Friday, 8.30am to 5.30pm (Sydney Time)).