Do I have to allowlist?

Yes – allowlisting the IPs ensures training/phishing emails will be delivered. When sending out sample simulated phish campaigns, we will simply need to ensure that the approved domains are allowlisted alongside the IPs.