Jericho Security | Support

Self-Service Setup

Jericho Security Contributor — Sat, 26 Apr 2025 07:10:14 GMT

Steps

1. Ensure Delivery and Accuracy

O365 Report Button Setup

Jericho Security Contributor — Thu, 24 Apr 2025 15:38:37 GMT

Report Phishing button in Outlook forward to Jericho Security's analysis system

Direct Mail Injection - Google Workspace

Jericho Security Contributor — Thu, 10 Apr 2025 18:20:46 GMT

Who is this for?

How to Integrate Your Email Server with Triage Center for Email Remediation

Jericho Security Contributor — Thu, 10 Apr 2025 18:16:23 GMT

Jericho's email remediation features empower you to maintain a safe and secure email environment by blocking or removing suspicious emails directly from your employees' inboxes. To enable these features, we need specific permissions from your email server. In this guide, we'll walk you through why we need these permissions and how to set up integration for both Google Workspace and Microsoft Office 365.

Why We Need Permissions

To provide the best protection, Jericho's triage center requires access to your email server. This access allows us to:

Block Suspicious Emails: Automatically prevent potentially harmful messages from reaching employees.
Email Labeling: Remove malicious emails directly from inboxes when they are reported or identified and label those emails as "Jericho Flagged".

By integrating your email server with our platform, you gain enhanced email security capabilities and ensure that your team is protected from threats, without manual intervention or delays.

Integration Steps for Google Workspace

Follow these steps to integrate Google Workspace with triage center:

Log in to your Google Workspace admin console.
Set Up Domain-Wide Delegation to Jericho's email remediation project:
- Go to "Security" > "API Controls" > "Manage Domain-Wide Delegation"
- Add a new Api client
  - Connect to the client id with 109158472569679787403
  - OAuth scopes: https://www.googleapis.com/auth/gmail.labels, https://www.googleapis.com/auth/gmail.modify, https://www.googleapis.com/auth/gmail.readonly,https://www.googleapis.com/auth/gmail.settings.sharing,https://www.googleapis.com/auth/gmail.settings.basic
  - click authorize
- Go back to Integration page and create your own domains.
- Create a Google Workspace Email Server and add your domains to it.
- Close the Email Server modal, click activate toggle on your Email Server in the table.
  - If you see a green light, that means it's integrated successfully.
Go back to Integration page

Integration Steps for Microsoft Office 365

Follow these steps to integrate Microsoft Office 365 with triage center:

Create a Email Server with Microsoft Office 365 type in the Integration page.
Click Connect Microsoft Office 365 button.
1. it will redirect you to the Microsoft consent screen after logging in with you Microsoft admin account.
3. Click Accept and it will redirect you back to integration page.
Your domains will be created automatically, configure which needs to be associated with your Microsoft Office 365 Email Server.
Close the Email Server modal, click activate toggle on your Email Server in the table.
- If you see a green light, that means it's integrated successfully.

Features Available After Integration

Once the integration is complete, you'll gain access to the following features:

Centralized Threat Management: A dedicated dashboard where your security officers can manage email threats and execute remediation actions.
Email Labeling: Suspicious emails can be labeled for easy identification, ensuring your users are informed of potential risks.
Email Blocking: Automatically prevent potentially harmful messages from reaching employees.

Need Help?

If you encounter any issues during setup or have questions about the integration, please reach out to our support team. Jericho is here to help you every step of the way.

Whitelisting for Mimecast

Jericho Security Contributor — Thu, 10 Apr 2025 18:11:52 GMT

Preventing Link Re-writing

General Whitelisting

Jericho Security Contributor — Thu, 10 Apr 2025 17:55:49 GMT

How to whitelist:

Azure Entra ID Single Sign On (SSO)

Jericho Security Contributor — Tue, 08 Oct 2024 18:27:33 GMT

Setting up Single Sign On (SSO) for Jericho Security Administrator users via Azure Entra ID SAML 2.0

Navigate to https://portal.azure.com/#home
Navigate to "Enterprise applications"
Click “New Application”
Click “Create your own application”
Name the application, e.g. "Jericho Security SSO”
Click “Create” at the bottom
Click “Get Started” on “Set up single sign on”
Click “SAML”
Edit the “Basic SAML Configuration”
Set Identifier (Entity ID) to any string and take note of it for your Jericho technical contact.
Set “Reply URL (Assertion Customer Service URL)” to https://app.jerichosecurity.com/users/saml/auth
Click “Save” at the top.
Send the Entity ID, the Microsoft Entra Identifier URL, App Federation Metadata URL, and the Login URL to your Jericho technical contact.
Test connection may not be successful until your Jericho technical contact has updated our configuration.
Assign all users and/or groups that you wish to be able to SSO into the Jericho Security application.
Note: For a user to be a Jericho Managers or Admin they must be invited to Jericho Security with either a "Manager" or "Admin" role with the same email address they’re using with the identity provider.
Once Jericho has reviewed the information and added it to your tenant's configuration, you will be able to enter your email on the Jericho Security login page and click "Log in with SAML" to authenticate.

Whitelisting for Barracuda Email Gateway Defense (a.k.a Email Security Service)

Jericho Security Contributor — Tue, 08 Oct 2024 18:26:52 GMT

IP Address Whitelisting

Configure exempt/trusted IP addresses at the Inbound Settings > IP Address Policies page in Email Gateway Defense.

IP addresses to exempt:

50.31.156.96/27 (50.31.156.96 - 127)

104.245.209.192/26 (104.245.209.192 - 255)

50.31.205.0/24 (50.31.205.1 - 255)
24.110.88.85
24.110.88.86

For additional details, visit: https://campus.barracuda.com/product/emailgatewaydefense/doc/96023004/ip-analysis-inbound/?sl=AYrTrqXft3v-5m1AOi-s&so=1

Domain Whitelisting

Configure exempt/trusted domains at the Inbound Settings > Sender Policies in Email Gateway Defense. Also, set Intent Domain Policies to Ignore.

Domains to exempt:

mailbot.jerichosecurity.com
Please see the other domains in your campaign creator.

For additional details, visit: https://campus.barracuda.com/product/emailgatewaydefense/doc/96023020/sender-and-recipient-analysis

Additional references:

Okta Directory Integration

Jericho Security Contributor — Tue, 08 Oct 2024 18:25:53 GMT

Directory Integration with Okta User Provisioning via SCIM 2.0

The following steps configure your Okta User Directory to send user information to Jericho Security so we can populate users and groups for the Phishing Simulator and Training Center.

Okta Single Sign On (SSO)

Jericho Security Contributor — Tue, 08 Oct 2024 18:25:12 GMT

Setting up Single Sign On (SSO) for Jericho Security Administrator users via Okta SAML 2.0

Log into your Okta instance with administrator permissions.
Click on the "Admin" button at the top to switch into administrator mode.
Click "Applications" on the left menu to expand it, then click "Applications" to open the Applications panel.
Click the "Create App Integration" button.
Select "SAML 2.0" as the sign-in method and click "Next".
Name the Application, e.g. "Jericho Security Admin SSO” and click "Next".
Set “Single sign-on URL” to https://app.jerichosecurity.com/users/saml/auth
Ensure "Use this for Recipient URL and Destination URL" is checked.
Set "Audience URI (SP Entity ID)" to any string (e.g. "jericho-saml-admin") and take note of it for your Jericho technical contact.
Set "Name ID format" to "EmailAddress".
Set "Application username" to "Email".
Under "Attribute Statements" set "Name" to "email" and "Value" to "user.email". You can leave "Name format" as "Unspecified".
Click "Next" at the bottom.
You can fill out the optional form if you wish, then click "Finish".
Expand "More details" and please send the Audience URI (SP Entity ID) set earlier, the Metadata URL, the Issuer, and the Sign on URL to your Jericho technical contact.