Skip to main content

Configure your email service to accept Email Security e-mails

Ensure that inbound and outbound firewall rules AND/OR mail server connector rules (e.g. Office 365) are configured to also allow authorized GravityZone Security for Email servers inbound and out bound(if previously restricted).

Required IP addresses

You can find a list of our IP addresses here:

Important

There are three sets of IP addresses:

  • Set 1 - use this if your GravityZone is provisioned with https://cloudgz.gravityzone.bitdefender.com/

  • Set 2 - use this if your GravityZone is provisioned with https://cloud.gravityzone.bitdefender.com/

  • Set 3 - use this if your GravityZone is provisioned with https://cloudap.gravityzone.bitdefender.com/

You can check how you are provisioned by logging in to the GravityZone console and checking the URL.

Set 1 (IP addresses)

The following IP addresses and ranges are used by GravityZone Security for Email to deliver email to your server. Mail delivery operates on the standard SMTP port of 25. Please make sure your firewall and/or email server is configured to accept connections from these IP addresses:

51.140.50.9
23.97.185.122
52.28.195.233
104.40.205.111
52.28.207.52
46.137.91.239
46.51.191.66
46.51.184.151
52.29.103.252
40.115.45.200
40.115.43.250

Note

Be sure to use the actual IP addresses in your firewall, rather than hostnames.

Set 2 (IP addresses)

The following IP addresses and ranges are used by GravityZone Security for Email to deliver email to your server. Mail delivery operates on the standard SMTP port of 25. Please make sure your firewall and/or email server is configured to accept connections from these IP addresses:

104.214.75.142
52.200.11.158
104.214.75.99
52.200.119.29
52.161.96.58

Note

Be sure to use the actual IP addresses in your firewall, rather than hostnames.

Set 3 (IP addresses)

The following IP addresses and ranges are used by GravityZone Security for Email to deliver email to your server. Mail delivery operates on the standard SMTP port of 25. Please make sure your firewall and/or email server is configured to accept connections from these IP addresses:

104.214.75.142
52.200.11.158
104.214.75.99
52.200.119.29
52.161.96.58

Note

Be sure to use the actual IP addresses in your firewall, rather than hostnames.

Configuration

To configure your email service follow the steps below:

Configure GravityZone Security for Email for Office 365 accounts.

To configure GravityZone Security for Email for use with an Office 365 account follow the steps below:

1. Configure GravityZone Security for Email Inbound Mail

  1. Go to Products > GravityZone Security for Email > Product Configuration.

  2. Go to Inbound Mail.

  3. Click Add to add a new delivery route and fill in the route information:

    • Under Domain, type in the domain name of the host you want to redirect.

    • Under Cost set route priority.

      The cost defines route priority for multiple routes.The lower the number, the higher the priority.

    • Under Route enter the 0365 domain name (e.g. domain-com.mail.protection.outlook.com)

      Note

      This can be found under O365 > Settings > Domains > Domain Details > MX Value

    EMS_config_office365_1_103597_en.png

  4. Update to save changes.

2. Configure Office 365

  1. Log in to Microsoft 365 Defender.

  2. Click Policies & Rules on the menu in the left side of the page.

  3. Select Threat Policies.

  4. Select Anti-Spam Policies.

  5. Click Connection filter policy.

    The Connection filter policy (Default) panel is displayed.

  6. Click Edit connection filter policy.

  7. In the Allowed IP Address section, add all of the IP addresses according to the correct addresses for your cluster - see Europe, United States.

  8. Select the Turn On Safe List checkbox.

  9. Click Save:

    EMS_config_office365_2_103597_en.png

3. Configure GravityZone Security for Email Outbound Mail

  1. Go to Products > GravityZone Security for Email > Product Configuration.

  2. Go to Outbound Mail.

  3. Click Add.

  4. Under Hostname enter the following string:

    spf://spf.protection.outlook.com

  5. Update to save changes.

Configure Inbound mail on Office 365 to reject non-EMS emails

Please follow the steps in this article to restrict Office 365 and then return to this article to continue configuration.

Video tutorials

Configure EMS for Gmail using Google Workspace

To configure GravityZone Security for Email for use with Google Workspace follow the steps below:

Configuring Inbound Mail

  1. Go to Products > GravityZone Security for Email > Product Configuration.

  2. Go to Inbound Mail.

  3. Click the Add button emailsecadd.png to add a new delivery route.

  4. Select your Domain from the drop-down list.

  5. Under Cost set route priority to 5.

    The cost defines route priority for multiple routes.The lower the number, the higher the priority.

  6. Under Route enter the following: ASPMX.L.GOOGLE.COM

  7. Update to save changes.

  8. Repeat steps 3 to 7 to add the following routes and associated costs:

    ALT1.ASPMX.L.GOOGLE.COM with the cost of 10

    ALT2.ASPMX.L.GOOGLE.COM with the cost of 15

    ALT3.ASPMX.L.GOOGLE.COM with the cost of 20

    ALT4.ASPMX.L.GOOGLE.COM with the cost of 25

    The final routes should look similar to the ones in the screenshot below.

    gsuite_final_routes.png

Configuring Outbound Mail

  1. Go to Products > GravityZone Security for Email > Product Configuration.

  2. Go to Outbound Mail.

  3. Click the Add emailsecadd.png button.

  4. Under Hostname enter the following hostname:

    spf://_spf.google.com

  5. Update to save changes.

Video tutorials

In this section: