SEA mail logs for outbound emails

Question

Hi! 
 I've develop migraine in finding solutions for almost a month now.. 
 I noticed that the mails logs (sender column) does not record the outbound mails but the sender's from external like Gmail can be logged. So basically there are email traffic for both incoming & outgoing mails.. Outbound mails are going directly to the internet instead of routing it to SEA first. 
 I tried to create smart host just to relay the traffic, outbound mail won't send out so i have to find another way.. So confused, i don't know if i needed to create connectors on the exchange server, what route should be done. 
 The SEA admin / user guide does not have a clear procedure on how to configure the complex environment for the outbound mail traffic. 
 reference: 
 esa.sophos.com/.../ConfigGuide.pdf

Red_Warrior · Answer

Hi Manuel 
 
 The email appliance logs all mail that it processes regardless of direction. Just by your diagram my initial guess is that the switch is sending outbound mail to exchange. There is no need for a switch. 
 
 Normally your mail should look something like this. 
 MX record >> A-record to pub ip >> firewall >> port forward p25 >> email appliance >> exchange 
 The appliance would be configured to accept email for domain ABC.com and delivere to exchange 
 exchange would have an anonymous receive connector with the ip of the appliance 
 
 On the way out 
 exchange >> email appliance >> firewall >> internet. 
 exchange is configured with an anonymous send connector to the appliance 
 the appliance is configured with exchanges ip address listed under internal hosts 
 
 something like this may help 
 https://technet.microsoft.com/en-us/library/bb232021(v=exchg.141).aspx 
 and 
 https://technet.microsoft.com/en-us/library/aa998662(v=exchg.150).aspx 
 
 in terms of appliance configuration, you just need to define the domains you accept mail for and add a delivery server 
 the internal relay list should contain all of the emails that you wish to allow to relay mail outbound.

Md. Arif Uddin · Answer

Please see below video: