The module allows some extra tweaks for advanced configurations.

Sections on this page:

 

anchor link Creating Connectors and disabled rules for time-controlled integration

For sensitive environments, where mailflow may only be changed in specific time frames, it is possible to create rules and connectors as "disabled". Both CmdLets New-SC365Connectors and New-SC365Rules have a -disabled switch. See the following examples:

New-SC365Connectors -SEPPmailCloudDomain 'contoso.eu' -routing 'parallel' -region 'de' -disabled
 
New-SC365Rules -SEPPmailCloudDomain 'contoso.eu' -disabled

 

To enable the disabled transport rules in ExO so that E-mails can flow through the SEPPmail.cloud, use the Exchange Online admin website or the PowerShell Commands Enable/Disable-TransportRule.

# Enable SEPPmail.cloud TransportRules
 
Get-TransportRule -Identity '[SEPPmail.cloud]*'|Enable-TransportRule
 
# Disable SEPPmail.cloud TransportRules
 
Get-TransportRule -Identity '[SEPPmail.cloud]*'|Disable-TransportRule

 

To avoid getting asked for every rule to confirm the change and run the command in "silent" mode use:

Get-TransportRule -Identity '[SEPPmail.cloud]*'|Disable-TransportRule -Confirm:$false -Verbose

 

anchor link Place TransportRules at the top of the rule-list

By default out transport rules will be placed at the bottom of all other transport rules. If you want to change this use:

New-SC365Rules -SEPPmailCloudDomain 'contoso.eu ' -PlacementPriority Top

 

anchor link Tag E-Mails with an [EXTERNAL] marker in parallel mode

Customers which use the SMC inline can configure the SMC to tag all E-mails inbound as [EXTERNAL] (or similar). This is not possible in parallel mode.

If you use prepend disclaimer on your inbound traffic, Microsoft will break the structure of the encrypted mail and our cloud will not be able to decrypt the mail anymore.

By activating the "Stop processing more rules" option on the transport rule [SEPPmail.cloud] - 100 Route incoming e-mails to SEPPmail, you make sure that the disclaimer is only added after the decryption. Unfortunately, this will still break the S/MIME or PGP signatures. This is why we recommend to only change the subject of the E-mail.

If you use parallel routing and want to mark E-mails coming from outside your organization, please use a transport rule to prepend the subject with [EXTERNAL] and/or use the special tag from Microsoft according to the following example:

Set-ExternalInOutlook -Enabled $true