Instructions for Configuring Microsoft Exchange 2007/2010 for smarshencrypt

Transcription

1 Instructions for Configuring Microsoft Exchange 2007/2010 for smarshencrypt Versions Addressed: Microsoft Exchange 2007/2010 Document Updated: March 25, 2015 Co nfidential Copyright 2015 Smarsh, Inc. All Purpose: This document will assist the end user in configuring smarshencrypt for Microsoft Exchange 2007/2010.

2 Tables of Contents Navigate to the Send Connector configuration area... 3 Add a new Send Connector for using Encryption only... 4 Add new Journaling Send Connector for Encryption with existing Journaling rule... 9 Add new Encryption Send Connector for Encryption with existing Journaling rule Verification of messages correctly traveling through Smarsh s smart host Page 2 of 16

3 This document is intended to serve as a guide for configuring the Microsoft Exchange Send Connector feature to enable encryption with Smarsh. If you need assistance with this process please reference Support for Microsoft Exchange Server or contact Microsoft Support. The instructions that follow are based upon Microsoft Exchange 2007 & 2010, both of which have a very similar architecture. You will need the following information (which has been provided to you in an ): Your fully qualified domain name (FQDN): obsmtp01.smarsh.com Your journaling address space: yourdomain.journaltosmarsh.com Navigate to the Send Connector configuration area Sign into your Exchange 2007/10 server. Open your Exchange Management Console 1) From the areas on the left-hand side, select Hub Transport. 2) Select, from the tabs at the top, Send Connectors. If you already have any existing Enabled Send Connectors, they may conflict with the ones that you are about to create. Please ensure with your best judgment how to proceed with managing your current connectors, with these new ones. 3) Select New Send Connector on the right-hand side. Page 3 of 16

4 **NOTICE** You will need to choose the correct path to ensure proper routing of outbound s and journaling. If you have encryption only, will just be adding 1 Send Connector. If you are setting up encryption, and already have a journaling rule in place, go to page 9, and follow the instructions from that point. This will create a total of 2 Send Connectors, to ensure the journaled messages travel directly out through the internet. This prevents journaled messages traveling through the outbound relay, along with regular messages. Add a new Send Connector for using Encryption only 1) Enter a name for your Send Connector. (i.e. SmarshEncrypt) a. Leave Custom for the intended use for the Send connector b. Click Next > 2) Click Add, to add a new address space. Page 4 of 16

5 3) Enter an asterisk ( *, as shown below) for the Address space. a. Enter a cost of 1 i Include all subdomain will automatically check itself, this is OK. b. Click OK 4) Review your newly created Address Space a. Click Next > Page 5 of 16

6 5) Select the bullet for Route mail through the following smart hosts: a. Click Add. 6) Select the bullet for: Fully qualified domain name (FQDN) a. Enter the following for that field i. obsmtp01.smarsh.com b. Click OK 7) Ensure that obsmtp01.smarsh.com is correctly listed as the Smart host in the review screen. a. Click Next > Page 6 of 16

7 8) Choose None for smart host authentication setting a. Click Next > 9) Click Add, to add your Exchange mail server 10) Choose your Exchange mail server you will be applying this to Page 7 of 16

8 11) Review your Configuration Summary a. If everything appears correct, click New All of your outbound messages will now travel through Smarsh s smart host. Please review the we have sent you regarding your encryption rules, and how to trigger the service. Page 8 of 16

9 Add new Journaling Send Connector for Encryption with existing Journaling rule 12) Enter a name for your first Send Connector. (i.e. Smarsh Journaling) a. Leave Custom for the intended use for the Send connector b. Click Next > 13) Click Add, to add a new address space. Page 9 of 16

10 14) Enter the address space that we have provided to you via . a. It should be the part of the journaling address after symbol. b. Enter a cost of 1 c. Leave Include all subdomain unchecked d. Click OK 15) Review your newly created Address Space a. Click Next > 16) At the next screen, choose Use domain name system (DNS) MX records to route mail automatically. 17) Click Next > Page 10 of 16

11 18) Click Add, to add your Exchange mail server 19) Choose your Exchange mail server you will be applying this to 20) Review your Configuration Summary a. If everything appears correct, click New Page 11 of 16

12 Add new Encryption Send Connector for Encryption with existing Journaling rule 21) Enter a name for your Send Connector. (i.e. SmarshEncrypt) a. Leave Custom for the intended use for the Send connector b. Click Next > 22) Click Add, to add a new address space. Page 12 of 16

13 23) Enter an asterisk ( * as shown below) for the Address space. a. Enter a cost of 2 i. Include all subdomain will automatically check itself, this is OK. b. Click OK 24) Review your newly created Address Space a. Click Next > Page 13 of 16

14 25) Select the bullet for Route mail through the following smart hosts: a. Click Add. 26) Select the bullet for: Fully qualified domain name (FQDN) a. Enter the following for that field i. obsmtp01.smarsh.com b. Click OK 27) Ensure that obsmtp01.smarsh.com is correctly listed as the Smart host in the review screen. a. Click Next > Page 14 of 16

15 28) Choose None for smart host authentication setting a. Click Next > 29) Click Add, to add your Exchange mail server 30) Choose your Exchange mail server you will be applying this to Page 15 of 16

16 31) Review your Configuration Summary a. If everything appears correct, click New All of your outbound messages will now travel through Smarsh s smart host. All of your journaling messages will now travel directly to the internet. Please review the we have sent you regarding your encryption rules, and how to trigger the service. Verification of messages correctly traveling through Smarsh s smart host To test your configuration send a few test messages from your domain. Then back on your implementation case asking Smarsh to confirm. If you currently have an SPF record setup for your domain. You will need to update this SPF record to the following: v=spf1 include:spf.smarsh.com all * The SPF record can be updated where your domain s DNS is currently being hosted. Please see the following article if you have questions about creating send connectors: Page 16 of 16