Allow list functionality in Additional Policy

Hello,

My users frequently have emails come in for work purposes that are caught in some of our "Additional Policies", I need a quick way to add specific external email addresses or domains to bypass all additional policies that are configured.

The way the Sophos documentation reads makes it sound as though the "include/exclude sender/receiver" is not the way to do it. I currently have a "Bypass All" policy set up as the highest priority item, and I have been experimenting with rules in that policy to try and make this work, but I'm not very proficient with regular expression, and my rules don't always seem to work.

Any insight would be greatly appreciated.

Thanks,
--Austin