Mesh 365
This guide outlines how to install Mesh 365 for organizations on Microsoft 365, where their mx records point to Microsoft or to a third party email gateway.
Tip
Installation Time: Less than 2 minutes
Tip: If this is your first time setting up a customer in Mesh (or even if it’s not), it is worthwhile familiarizing yourself with this checklist ⟶ Before You Start Checklist
Step 1: Click edit on the customer account on the Customers page
After you’ve completed the order form, click on the edit icon to the right of the customer’s name.
 |
Step 2: Click Authorize
Select "O365 Authorize" to permit Mesh to connect to your Microsoft 365 tenant. This will take you to the Microsoft 365 login page.
 |
Once logged in, you need to accept the permissions. This will take you back to your Mesh MSP portal where you need to click accept again.
 |
Step 3: Click Sync to Populate Mailboxes
Clicking on the Azure Sync will populate all mailboxes in Mesh.
 |
Tip
If using Mesh 365 Monitor Mode, setup is complete.
If using Mesh 365 Protect Mode, proceed to step 4.
More info about modes can be found here: https://docs.emailsecurity.app/help-center/monitor-mode-mesh-365-only
Step 4: Create a Mail Flow for Rule for Mesh in Microsoft 365
Note
This step is required if you have any of the customer policy options set to “Quarantine in Mesh” and is in Protect Mode.
To ensure Mesh quarantine digests generated by our servers and any emails released from the Mesh quarantine are delivered without additional filtering by Microsoft, you need to create a mail flow rule in Microsoft 365 for our IP ranges.
This video walks you through the process step by step:
Ensure that the IP ranges applicable to your region are used. You can find this here.
View our step by step guide on creating a mail flow rule.
Visit Microsoft’s documentation on this here.
Note
Important: If you are moving from another Secure Email Gateway, you will likely have an existing connector in place to reject emails that aren't sent from a specific IP range.
You will need to remove this before changing MX records to prevent emails generated by Mesh (digests/release requests) from being rejected.
Step 5: Configure Report Junk & Phishing Button (Optional)
The Outlook report button can be utilised to share potential false negatives / false positives with your helpdesk and the Mesh detection team. View our step-by-step guide.
 |
Tip
You’re all set. Your email is now being protected by Mesh 365.
Monitor Mode (Mesh 365 only)
Monitor mode is a feature exclusive to Mesh 365.
In this mode, emails are analyzed and verdicts are given, but actions such as quarantine, junk, and banners are not applied.
Monitor mode offers several advantages:
Demonstrate Value: Showcase the effectiveness of Mesh 365 without impacting the current mail flow.
Seamless Onboarding: Ensure a smoother onboarding experience by creating rules for legitimate senders who receive non-clean verdicts before transitioning to protect mode.
Enabling when creating a customer
Monitor mode can be enabled in the new customer form by toggling the slider.
After the customer account has been created, Monitor Mode can only be enabled or disabled by logging in as the customer and navigating to the Settings section, where the monitor mode toggle can be switched on or off.
