"Outbound Emails sent from Sophos" Connector Failed to Setup

Update to original post:

Only the O365 licenses mentioned in my original post are restricted from enabling inbound connectors from your org. to O365 that are configured to use an IP address. However, if you use a certificate domain name instead of an IP address, you can enable the inbound connector without an elevated license. In my case, I have pressed the tech and he is going to get with his senior engineers to see if they will enable the connector still since I have explained its legitimacy.

It seems to me that Sophos should adjust this connector to use a certificate domain name automatically now that Microsoft has implemented this change so that the setup continues to be as smooth and easy as it was prior to the change.

Hello there,

Thank you for contacting the Sophos Community.

Can you please share the Case ID you have logged so we can follow up?

I would like to check if this is a Feature Request/if this is in the Road Map/ or if there’s a misconfiguration. 

Regards,

Hello there,

Thank you for contacting the Sophos Community.

Can you please share the Case ID you have logged so we can follow up?

I would like to check if this is a Feature Request/if this is in the Road Map/ or if there’s a misconfiguration. 

Regards,

We have two cases: 35418014, 06315032.

Hello there,

Thank you for the Case IDs

I will check internally and get back to you once I hear back or by next  Monday end of the day.

Regards, 

Hello there,

Just to let you know this is already being investigated under XGE-28188 

This is currently under review.

Regards,

I appreciate the update. I could not find XGE-28188 when I searched known Sophos Email issues. Could you please provide a link?

Thanks.

Hello,

This is a new number; this is not a known issue at the moment so you won't find it in our documentation; also this is being investigated currently.

Regards,

Thanks Emmanuel, I really appreciate your updates. Since it is not a known issue yet, is there any means for me to track the progress of XGE-28188?

Hello there,

No, updates are provided by GES directly in the Ticket.

Regards,

Hi Emmanuel, I am facing exactly the same problem and opened a case yesterday: 06354980 - I also opened a microsoft support ticket but there is no real progress since friday. 

Hello Stefan,

Thank you for the Case ID, it seems your case is being escalated to GES, to confirm if you’re being affected by XGE-28188

This is already with DEV and they have been able to replicate the issue, they are working towards a resolution. 

Today I got the following apparently definitive rejection from Microsoft Support:

"Unfortunately, Sophos does not support our way to integrate with a 3rd party service: https://aka.ms/EmailAddOnService

 Szenario: Integrieren von Microsoft 365 oder Office 365 in einen E-Mail-Add-On-Dienst | Microsoft Learn

As far Sophos is a sanitization service - we have published our guidance on how to integrate with such a service and it does NOT involve setting up an OnPremises inbound connector. Maybe you can contact Sophos to provide specific reasons why they want to relay through Exchange Online or update their documentation.

https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/manage-mail-flow-using-third-party-cloud#scenario-1---mx-record-points-to-third-party-spam-filtering

After more than three weeks, the end of the journey has probably been reached here.
I sold a Sophos product to a new customer with confidence and now I realize that was a huge mistake.
After more than three weeks:

- Produkt not working.
- No support from Microsoft
- No support, no information, no substantive feedback from Sophos.

There seem to be two classes of products at Sophos:
those that are sold and those that work after they've been sold
All I can do now: give customers the money back and look for another solution.
To all other Sophos partners: BEWARE of SOPHOS MAILFLOW
Regards, Stefan