The following image shows the message flow for emails which are sent from an organisation-internal mailbox to recipients outside of the company.
The generation of the "rules" and "connectors" required in this context is described in more detail below.

Figure 2
Emails which are sent from within the organisation to an external recipient (Internet), are first forwarded by the "Exchange Online" to the SEPPmail Secure E-Mail Gateway based on the ruleset.
The email is then processed on the SEPPmail Secure E-Mail Gateway according to the ruleset settings and returned to the "Exchange Online".
[Based on the ruleset, "Exchange Online" recognises that the email does not originate directly from Microsoft 365 but from the SEPPmail Secure E-Mail Gateway and directly sends the email out to the Internet.