This article describes how to configure Email Protection provided by Smarsh Hosted Services with your Office 365 account purchased from Smarsh Hosted Services. 

In order to configure inbound mail flow routing through Smarsh Hosted Services Email Protection, follow the steps described below.

Enable Email Protection module

Contact Technical Support and ask to enable Email Protection if you do not have it yet. You will see the module appear under Services in CONTROL PANEL.

Adding domains

Add your domain/s to Domains section in CONTROL PANEL:

  1. Navigate to Services > Domains
  2. In the Add Existing Domain section, type your domain name in the blank box and click Add
  3. Click the domain name link, then go to the Split
  4. On the Split tab, choose A mail server not hosted by Smarsh Hosted Services

MX records

Contact your DNS hosting provider and create or adjust MX record for your domain/s to point to east.smtp.mx.o365.serverdata.net. DNS propagation may take up to 72 hours, however, usually, changes are propagated faster.

After everything is done, all your inbound emails will be routed through Email Protection service.

Create a transport rule to bypass O365 filtering

Note: it is recommended to create a transport rule in the Exchange admin center in order to bypass spam filtering in Office 365. To do that, follow these steps:

  1. Log in to Office 365 portal.
  2. Under Admin Centers, choose Exchange.
  3. Under Mailflow, select Rules.
  4. Click the + sign to create a new rule and click More Options...
    NewRule
  5. Set the following values:
    - Apply this rule if: The Sender... select IP address is in any of these ranges or exactly matches, then enter IP addresses obtained from support and click OK
    Sender
    - Do the following: Modify the message properties... select Set the spam confidence level (SCL) to... then in the Specify SCL drop down menu choose Bypass Spam Filtering
    Bypass
    - Audit this rule with severity level: Low
    - Choose a mode for this rule: Enforce
  6. Click Save to add the rule
    SaveRule

Set up inbound send connector

Important: Inbound Send connector that enforces IP restrictions should only be created when DNS propagation is completed. Otherwise mail will be lost.

To do that, follow these steps:

  1. Log in to Office 365 portal.
  2. Under Admin Centers, choose Exchange.
  3. Under Mailflow, select Connectors.
  4. Click the + sign to create a new Send Connector.
    New Inbound Connector
  5. Set the following values from the drop-down menus, and click Next:
    - From: Partner Organization, To:  Office 365
    Type
    - Name the send connector and type in the description, please, make sure to check Turn it on checkbox and click Next:
    Name Send Connector
    - Select the option Use the sender's domain to indentify the Partner's organization, click Next:
    Identify Partner
  6. Click the + sign to add "*" to the list of domain names. Click Next.
    Add Domains
  7. Set the allowed IP ranges for the inbound mailflow:
    - Check the box: Reject messages if they aren't from within this IP range
    -
    Click the + sign to add the IP ranges.
    Add IP ranges
    Important: Please, contact Support to get the list of IP ranges for your account.
  8. Click Save.
  9. Click OK.