This article describes how to configure Email Protection provided by Smarsh Hosted Services with your Office 365 account purchased from Smarsh Hosted Services. 

In order to configure inbound mail flow routing through Smarsh Hosted Services Email Protection, follow the steps described below.

Enable Email Protection module

Contact Technical Support and ask to enable Email Protection if you do not have it yet. You will see the module appear under Services in CONTROL PANEL.

Adding domains

Add your domain/s to Domains section in CONTROL PANEL:

  1. Navigate to Services > Domains
  2. In the Add Existing Domain section, type your domain name in the blank box and click Add
  3. Click the domain name link, then go to the Split
  4. On the Split tab, choose A mail server not hosted by Smarsh Hosted Services

MX records

Contact your DNS hosting provider and create or adjust MX record for your domain/s to point to east.smtp.mx.o365.serverdata.net. DNS propagation may take up to 72 hours, however, usually, changes are propagated faster.

After everything is done, all your inbound emails will be routed through Email Protection service.

Create a transport rule to bypass O365 filtering

Note: it is recommended to create a transport rule in the Exchange admin center in order to bypass spam filtering in Office 365. To do that, follow these steps:

  1. Log in to Office 365 portal.
  2. Under Admin Centers, choose Exchange.
  3. Under Mailflow, select Rules.
  4. Click the + sign to create a new rule and click More Options...
    NewRule
  5. Set the following values:
    - Apply this rule if: The Sender... select IP address is in any of these ranges or exactly matches, then enter IP addresses obtained from support and click OK
    Sender
    - Do the following: Modify the message properties... select Set the spam confidence level (SCL) to... then in the Specify SCL drop down menu choose Bypass Spam Filtering
    Bypass
    - Audit this rule with severity level: Low
    - Choose a mode for this rule: Enforce
  6. Click Save to add the rule
    SaveRule

Create a transport rule to restrict inbound mail

The second rule needs to be created to restrict inbound mail only to Smarsh Hosted Services's IPs.
Note: Enable this rule only after repointing MX to Email Protection and DNS propagation.

To do that, follow these steps:

  1. Log in to Office 365 portal.
  2. Under Admin Centers, choose Exchange.
  3. Under Mailflow, select Rules.
  4. Click the + sign to create a new rule and click More Options...
    NewRule
  5. Set the following values:
    - Apply this rule if: The Sender... select is external/internal, then choose from a drop-down Outside the organization
    Outside
    - Do the following: Block the message... select reject the message and include an explanation then type a message that your senders should receive and click OK
    Reject
    - Except if...: choose The Sender then select IP address is in any of these ranges or exactly matches then enter IP addresses obtained from support and click OK
    Exception
    - Audit this rule with severity level: Low or Not specified
    - Choose a mode for this rule: Enforce
    - Check the box: Stop processing more rules
    -
    Select Envelope from Match sender address in the message dropdown
  6. Click Save to add the rule
    SaveRule2
  7. Verify that the rule to restrict inbound mail from outside your organization to the Email Protection IPs displays first in the mail flow rules list and has a higher priority (a lower number) than other rules.
    Priority