Email Security: Quick Start for Microsoft 365.

Updated 1 week ago by admin

Email Security: Quick Start for Microsoft 365

Follow this guide to successfully deploy Email Security (EMS) for Microsoft 365 (M365).

Preparing The Environment

The below steps will guide you through the configuration needed for EMS to protect your M365 environment.

Activating your account via the onboarding email.

  1. Once your account has been provisioned, you will receive an onboarding email. This video walks you through the steps to activate your account.

Inbound Mail Flow

The below steps will guide you through setting up EMS for Inbound Mail Flow to Exchange Online.

  1. Adding your Exchange Online email domain(s) and route.

This video will guide you through adding your Exchange Online domain to EMS.

For more information about Configuring Inbound Mail for Exchange Online, please refer to our knowledge-based articles by clicking HERE.

  1. User Directory - Mailbox Synchronisation.

This video will guide you through integrating with Microsoft Entra ID, enabling mailbox synchronisation to EMS.

For more information about Active Director or Entra ID, please refer to our knowledge-based articles by clicking HERE.

  1. Ensure Mailbox Synchronisation has been completed.

This video will guide you through confirming mailbox synchronisation to EMS has been completed.

Ensure this step is completed before switching mail flow to EMS.

For more information about Mailboxes, please refer to our knowledge-based articles by clicking HERE.

  1. How to Add a new Administrator Account.

This video will guide you through adding a new Administrator to EMS (with EMS deployments, it's best to add the administrator account after Mailbox Synchronisation has been completed).

For more information about our predefined roles, please refer to our knowledge-based articles by clicking HERE.

  1. Granting access to synchronise Entra AD shared mailboxes.

This video will guide you through the steps required within Entra ID to ensure EMS can correctly identify Shared Mailboxes.

For more information about Mailboxes, please refer to our knowledge-based articles by clicking HERE.

  1. Configuring DMARC.

To ensure inbound protection against spoofing attacks, DMARC must be configured.

Follow the steps within this KB HERE.

  1. Configuration Changes on M365.

This video will guide you through safelisting EMS IP addresses within Microsoft Defender to ensure Emails scanned by EMS are delivered to Exchange Online without problem.

Please refer to our knowledge-based articles by clicking HERE for the configuration steps.

M365 will still quarantine emails they consider to contain Virus or Phishing content.
  1. Configuring MX Change.

Use the link below to determine the required MX Records, SPF Records, Smart Hosts entries, and EMS IP Addresses for your environment.

Please refer to our knowledge-based articles by clicking HERE for the configuration steps.

Ensure you select the correct region, or mailflow will be affected.
  1. Configuring Office 365 to reject non-EMS emails.

This video will guide you through configuring Exchange Online to ensure that Exchange Online does not accept direct connections outside of EMS.

Please refer to our knowledge-based articles by clicking HERE for the configuration steps.

Outbound Mail Flow.

The below steps will guide you through setting up EMS for Outbound Mail Flow to Exchange Online.

  1. Setting up DKIM and SPF.

To ensure mail flow is not affected, please complete these steps.

Please refer to our knowledge-based articles to determine the SPF Records needed for your environment by clicking HERE.

Please refer to our knowledge-based articles for DKIM Setup by clicking HERE for the configuration steps.

  1. Setting up Outbound mail on EMS.

This step ensures that EMS will accept outbound emails from M365. We did this step in our Adding your Exchange Online email domain(s) and route video, where we added the Exchange Online SPF record. spf://spf.protection.outlook.com

Please refer to our knowledge-based articles by clicking HERE for the configuration steps.

  1. Setting up M365 to send Outbound emails to EMS.

This video will guide you through configuring Outbound mail on Office 365 to send emails via the EMS service.

Please refer to our knowledge-based articles by clicking HERE for the configuration steps.

How to Create a Connection Rule

This video will guide you through configuring a Connection Rule for the EMS service.

Please refer to our knowledge-based articles by clicking HERE for more information regarding Connection Rules.

How to Create a Message Rule

This video will guide you through configuring a Message Rule for the EMS service.

Please refer to our knowledge-based articles by clicking HERE for more information regarding Message Rules.

EMS Reporting

This video will guide you through running EMS Reporting, filtering data and using the Post Delivery Email Deletion feature.

Please refer to our knowledge-based articles by clicking HERE for more information regarding Connection Rules.

The below are recommended features to enable on EMS but are not required for Mail flow.

Post Delivery Email Deletion (Retract)

Post Delivery Email Deletion is a feature of Email Security that allows an administrator to delete email that has been delivered and stored in a Microsoft 365 / Office 365 mailbox, including any replies or forwards of the message within the domain. This feature is particularly useful to delete and remotely wipe any messages that were accidentally released from quarantine or that contain suspicious or confidential data.

This video will guide you through setting up the EMS Post Delivery Email Deletion feature.

For more information about Post Delivery Email Deletion (Retract), please refer to our knowledge-based articles by clicking HERE.

Enable MFA for Administrator Accounts.

As best security practices, we recommend enabling MFA on your Administrator account; please make sure that you create a new administrator account with the role Agent Installer without MFA enabled to ensure you can register Agents to your Censornet tenant. For further information regarding this topic, please refer to our knowledge-based articles.

For more information on password and MFA setup, please refer to our knowledge-based articles by clicking HERE.

Outlook Add-in

The below KB shows how to deploy the Email Security Outlook add-in.

KB Link Here: https://help.clouduss.com/ems-knowledge-base/installing-the-outlook-add-in-ems

User Guide KB: https://help.clouduss.com/email-security/outlook-add-in-v-2

USS Dashboard SSO with M365.

This video will guide you through configuring configuring SSO on the USS Dashboard.

Please refer to our knowledge-based articles by clicking HERE for the configuration steps.

How did we do?