Whitelist Salesforce senders in Email Impersonation Control service

Products

• Email Security.cloud

Issue/Introduction

Salesforce senders are stopped or tagged by the Email Impersonation Control service.

Environment

Email Security.cloud

Cause

Salesforce does not use the domain Salesforce.com solely when sending emails, but rather a long string ID followed by the domain Salesforce.com. This string changes per user, whitelisting each single user becomes a challenging task.

Resolution

Use the wildcard *.salesforce.com to whitelist the sending domain.

Caution: Exercise care when using wildcards for any approved senders, as they can broaden security exposure.