With this release, Avanan introduces the ability for Managed Service Providers (MSPs) to deploy configuration templates to their tenants while preserving each tenant’s individualized allow‑lists and block‑lists (exceptions).

In today’s multi-tenant MSP model, balancing centralized control with tenant autonomy is critical. MSPs need to enforce consistent security baselines across many customers, yet each tenant often has unique business requirements for trusted senders or blocked domains. This update enables MSPs to maintain a unified management framework through configuration templates, while ensuring that tenant‑specific exceptions — such as allow‑lists and block‑lists — remain untouched.

From the MSP’s perspective, this feature streamlines deployment of standardized settings (for threat detection, DLP, anti‑phishing, engine configuration, etc.) across all tenants. At the same time, each tenant retains their own tailored exceptions, reducing risk of operational disruption (for example unintended blocking of a vendor or trusted partner) and empowering tenants to manage their own business‑critical allow/deny lists. This dual‑layer approach — central baseline, tenant‑specific exceptions — delivers stronger protection combined with practical flexibility for diverse customers.

To use this capability:

  1. Create or edit a configuration template from your base tenant.

  2. In the new Exceptions section, choose whether to include all exceptions, only block lists, only allow lists, or exclude all exceptions from the push.

  3. Push the template.

Configuration Templates - Exceptions