Designate specific email domains as blacklisted or whitelisted so that you can monitor the metrics for incoming emails from these sources in your instance.

1. Navigate to System Security > Instance Security Center.
2. On the Instance Security Center homepage, click the Email tile, or click the Email link to access the Email page.
3. On the Email page, in the BlackList And WhiteList Domain section, click New.
4. On the form, fill in the fields.

   Table 1. BlackList And WhiteList Domain form

   Field	Description
   Domain	Name of the email domain that you are blacklisting or whitelisting. For example, enter servicenow.com to designate that whitelisted emails are sent to the instance from ServiceNow employees.
   Category	Category that indicates if the email domain is blacklisted or whitelisted: Blacklisted Designates that the email domain as blacklisted. You use it to identify domains that send suspicious or emails that pose a potential security threat to the instance. Whitelisted Designates that the email domain as whitelisted. You use it to identify domains when your metrics indicate that the incoming emails from it pose no security threats. Designating the domain as whitelisted enables you to track its inbound email activity over time.
   Active	Check box for enabling or disabling the blacklisting or whitelisting of the specified email domain.
   Notify	Name of the user to notify by email when activity occurs in the blacklisted or whitelisted domain. Click the spotlight search icon ( ) to search for the name of the user. Leave the Notify field blank if you do not want notifications sent.

5. Click Save.