To avoid HacWare phishing simulations and training emails from getting blocked by Avanan and stopping training from reaching the end-users. Please follow the steps below to create a mail flow rule.

NOTE: This rule should be placed directly above the rule called “Avanan Protect” in your Exchange Mail Flow rules.

Create a new mail flow rule

New Rule
NameAvanan HacWare
"Apply this rule if..." "Sender's IP Address is the range ..."
*Do the following... "Set the message header to this value..." X-CLOUD-SEC-AV-INFO:{HWDOMAIN}-TRAINING
Choose a mode for this rule Enforce
Stop processing more rules Yes
Match sender address in message Header

Please replace {HWDOMAIN} with the customer portal domain and add "-TRAINING".

Once the rule is saved, please confirm it looks like this:

Avanan HacWare

If the message...
If the sender IP addresses belong to one of these ranges:

Do the following...
set the message header X-CLOUD-SEC-AV-INFO with the value {}-TRAINING and stop processing more rules.

Rule Comments

Rule Mode

Additional Properties
sender address matches: Header


With these tips, you will ensure your users will be able to receive all their HacWare training emails.  If you need further assistance, please reach out to our support team at