NINJIO ALERT: Setup Native Outlook Button (for IT Pros)

Setup shared mailbox
Microsoft requires an internal mailbox as the destination for reported emails. A shared mailbox is recommended for this purpose, as it does not require a license.

1. Go to Exchange Admin Center, under “Recipients”, select “Mailboxes”
2. Click “Add a shared mailbox”
3. For “Display name”: We recommend “Report Phish”
4. For “Email address”: We recommend “report-phish”. Select your preferred domain.

Configure mail routing
A mail flow rule will be created to automatically route simulated phishing emails to the NINJIO reporting platform.

1. Within Exchange Admin Center, under “Mail flow”, select “Rules”
2. Click “Add a rule”, then “Create a new rule”
3. For “Name”: We recommend “NINJIO Simulated Phish Forwarder”
4. For “Apply this rule if”: Select “The subject or body” and “subject includes any of these words”

5. Enter each of the following, clicking “Add” after each:

   [168.245.68.235]
   [69.72.33.74]
   [198.244.55.48]
   client-ip=168.245.68.235
   client-ip=69.72.33.74
   client-ip=198.244.55.48

6. Then click “Save”
7. For “Do the following”: Select “Add recipients” and “to the Cc box”
8. Enter ”reported-messages@ninjio.com”, select it within the Suggested results, click “Save”, then “Next”
9. For “Severity”: Select “Low”
10. For “Comments”: We recommend “This is a rule to forward simulated phish to NINJIO when users click the Outlook Report Phish button”
11. Click “Next”, then “Finish”, then “Done”
12. Still on the Mail flow->Rules page, click into the rule we created (e.g. “NINJIO Simulated Phish Forwarder”)
13. For “Enable or disable rule”: Toggle it to “Enabled”