Darktrace Email (formerly known as Antigena Email) is an AI-driven email security solution. If you are using Darktrace Email in conjunction with Hoxhunt phishing simulations, you need to allowlist Hoxhunt in Darktrace.
The process for allowing Hoxhunt emails involves creating a “Model logic”, using the source IP addresses (CIP) and optionally a custom header. “Model Action” is to You then create a “model” that uses that recipe for the logic and set the actions to none.
Model Logic:Connection IP address is 35.156.0.138
-OR-Connection IP address is 37.139.12.94
-OR-Connection IP address is 193.3.183.0/25
Model Actions:Do not hold, and take no action on any existing header, link, or attachment
-AND-Log
Optionally, Model Logic can be based on custom header or combination of IP address and custom header name and value (configurable in Hoxhunt Admin Portal).
Model Logic:Connection IP address is 35.156.0.138
-OR-Connection IP address is 37.139.12.94
-OR-Connection IP address is 193.3.183.0/25
-AND-Header is x-hoxantigena-ID=abcdefg1234567
Model Actions:Do not hold, and take no action on any existing header, link, or attachment
-AND-Log