Skip to main content

Office 365 / Exchange Setup

This section includes information on how to configure your Office 365 or Exchange inbound environment for use with Mesh:

Create a Connector for Mesh in Microsoft 365 / Exchange (Inbound)

To ensure only email filtered by Mesh is delivered to your Microsoft 365 / Exchange tenancy, you need to create a connector for Mesh in Microsoft 365 / Exchange.

It is recommended that you consult Microsoft’s official documentation to ensure the setup is relevant to your environment.

Note

Important: Only complete this step after you point your MX records to Mesh. We recommend waiting 24 hours to allow for DNS propagation.

Note

Important: If you are moving from another Secure Email Gateway, you will likely have an existing connector in place to reject emails that aren't sent from a specific IP range.

You will need to remove this before changing MX records to prevent clean email filtered by Mesh from being rejected

This guide covers the following scenario:

868122831.png

Step 1: Connectors page

Navigate to the "Connectors" page on your Exchange Admin Console.

Step 2: Add a connector

Select “Add a Connector”.

868090094.png

Step 3: Specify mail flow

Select “Partner organization”. It will automatically select Office 365 as the “Connection to”.

868221092.png

Step 4: Connector Name

Provide a name to connector and a description if you so wish. Check the “Turn it on” box.

868024584.png

Step 5: Use of connector

Enter the “*“ wildcard to indicate to always use the connector when receiving emails inbound.

868188363.png

Step 6: Security Restrictions

Ensure the “Reject email messages if they aren't sent over TLS” is ticked. Ensure the “Reject email messages if they aren't sent from within this IP range" is ticked.

The IP ranges for your region can be found here. This setting ensures that emails cannot bypass our filtering/be delivered directly to your Microsoft 365 environment.

868221100.png

Note

The IP shown here is Microsoft’s example. Please ensure that you populate the box with the Mesh IP ranges for your region.

Step 7: Review Connector

Review the details you have entered and click save. Your connector list will now be updated to reflect the change.

868221106.png
868024604.png

Tip

You’re all set!

Create a Mail Flow Rule for Mesh in Microsoft 365 / Exchange (Inbound)

In order to allow email filtered by Mesh to be delivered safely without any double filtering from Microsoft, you need to create a mail flow rule in Microsoft 365 / Exchange for Mesh’s IP ranges.

It is recommended that you consult Microsoft’s official documentation to ensure the setup is relevant to your environment.

This guide covers the following scenario:

868122831.png

Step 1: Navigate to the Mail Flow

Navigate to the “Mail Flow” section in your Exchange Admin Center and select “Rules”.

Step 2: Add a rule

Select “Add a Rule” and then “Create a new rule”.

image-20240731-111045.png

Step 3: Rule Conditions

Give the rule a name and apply the following rule conditions.

  • The sender → is external/internal → Outside the organization.

    image-20240731-114017.png

AND

  • The sender → IP address is any of these ranges or exactly matches → Enter the Mesh IP ranges specific to your region. You can find the IP ranges here .

    Screenshot 2024-07-31 at 12.15.45-20240731-111607.png

Note

Important: Ensure you use the IP range applicable to your region. Using the incorrect range will result in loss of email.

Step 4: Do the Following

Under the “Do the following”, select “Modify the message properties”, select “set the spam confidence level (SCL)”, choose “Bypass Spam Filtering”.

image-20240731-114307.png

Step 5: Completed Rule

The completed rule conditions should look like this.

image-20240731-112130.png

Step 6: Rule Settings

The rule settings do not need to be changed and you can select next.

image-20240731-112208.png

Step 7: Enable Rule

Once saved it will appear in the list of rules. Ensure it is enabled.

image-20240731-115834.png

Tip

You’re all set!

In this section: