Good evening everyone,
I am wondering if something like this is possible with the Sophos XG Firewall.
We are hoping to have a scenario like the following.
MX Record is pointing to IP of Sophos > Sophos XG performs email scanning and protection > email then is forwarded or relayed to Exchange Online.
Biggest reason for wanting to do so is that the current Exchange Online license E3 only provides basic email protection and we already pay for Sophos XG which has better protection regarding spam and a number of other nice features. I understand that we could by pass Sophos XG and go directly to EO but the costs for the advanced email protection are not warranted.
Is the above possible or am I SOL and should go the better Office 365 license route?
This article at the end states that it only accepts IPs from Sophos Central. We are not using Sophos Central for firewall management.
This also does not apply to Sophos XG Firewall appliance.
Brad Clement :: Good day!
You can configure the settings to route and protect emails in MTA mode.
In MTA mode, Sophos Firewall routes emails between the mail server and the internet. When you turn on MTA mode, a firewall rule is created automatically to allow SMTP/SMTPS traffic. We recommend that you keep this rule at the top of the firewall rule table.https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/EmailConfigureEmailProtectionMTA.html
Email Protection Best Practice: https://community.sophos.com/sophos-xg-firewall/f/discussions/100293/email-protection-best-practice
Thank & Regards,
If a post solves your question, use the 'Verify Answer' link.
This video is in a language I do not understand so it is not good for me to follow this.
I read the one article and while this looks clear enough for an internal mail server will this work in routing emails to Exchange Online?
Yes, forwarding the Mail to Exchange Online is the same as forwarding to an onPrem Mailserver
Sophos Solution Partner since 2003 If a post solves your question click the 'Verify Answer' link.