Anybody using Exchange Online Protection with on premisis server?

[Ben_Stanton]

If so, can I just double check some configuration settings please (before I press the button and commit). There doesn't seem to be a way of testing as you go, only once all in place and you've changed mx records etc.

 

1. Office365 inbound connector (from school exchange).

Type - On premises

Sender Domain - *

Sender IP address - exchange external IP

Security - TLS enabled

TLS cert name - mail.myschool.co.uk

 

2. Office365 outbound connector (to school exchange).

Type - On premises

Smart Host - myinternalexchange.FQDN

Scope - myschool.co.uk

Security - Opportunistic

 

3. Send connector configured in on-site exchange (smart host)

myschool-co-uk.mail.protection.outlook.com

 

4. Website DNS

MX Host Name - @ Points to - myschool-co-uk.mail.protection.outlook.com

CNAME Host Name - autodiscover points to autodiscover.outlook.com

TEXT Name - @ Value v=spf1 include:spf.protection.outlook.com -all

 

Is this all right and nothing else to do?

 

Cheers in advance...

[FN-GM]

I also configured by Firewall so it will only accept email messages from Microsoft Online Protection. That way the spammers can't contact the server directly and by-pass it.

[Ben_Stanton]

Good plan. Will do that when I get it working.

 

I'm running through the 'change domain purpose' part on 365 but getting this error when checking connectors;

 

Sorry, it looks like your outbound connectors aren’t set up correctly.

You can wait a few minutes and try again. Or click Back and follow the steps again to make sure they’re set up correctly.

 

I have not added the details to my website DNS yet. Would that be causing the issue?

[FN-GM]

When I set it up it was totally different. For me it was dead easy, verify the domain, change some connectors and MZ records. I did it ages ago, since then its all changed!!!

[Ben_Stanton]

When I set it up it was totally different. For me it was dead easy, verify the domain, change some connectors and MZ records. I did it ages ago, since then its all changed!!!

 

Cheers. It should be quite easy really. It certainly seems it going through the steps. However, I just want to make sure before I stuff up everybody's email It could well be that the above error message is erroneous and the system would still work... but not that brave (or have that much confidence in MS...)

 

Ta

[Ben_Stanton]

I just bit the bullet and went full steam ahead. All working ok it seems, spam dramatically reduced (if not, completely stopped) overnight.

 

Cha-ching, fantastic for a freebie.