Exchange Mail Protection

In PfSense you have to NAT the SMTP-Ports to Sophos VM 10.13.11.111

In Sophos VM just activate and configure Email Protection as needed and use 10.13.11.x (PfSense LAN2-Adress) as Gateway on LAN2-Interface.

Exchange must use 10.10.10.2 as Gateway.

Regards
Sebastian

How to configure Email Protection policy in Sophos UTM 9?

As you want and need it. [:)]

I think this question should be asked to your Sophos partner because there is no standard answer for this.

Regards
Sebastian

Stilian, you might want to consider Basic Exchange setup with SMTP Proxy.

Cheers - Bob
PS Another that might interest you after al the mail is flowing correctly is Exchange WAF Guide.

My problem is that Exchange Server takes users from Active Directory which is located in another network.

The problem is that as Exchange Server has no connection with Active Directory stops working. In my case SMTP Proxy can not work.

You should go the other way round, vswitch1 (of your picture, vswitch 0 in vmware) connected to the pfsense, there only the 1st sophos interface (WAN) and on the other vswitch exchange, AD, 2nd UTM interface and all other VMs with no direct internet connection possible.

But generally, your setup shall also work if routing between the both subnets is allowed and the communication between exchange and AD isn't blocked.

You should go the other way round, vswitch1 (of your picture, vswitch 0 in vmware) connected to the pfsense, there only the 1st sophos interface (WAN) and on the other vswitch exchange, AD, 2nd UTM interface and all other VMs with no direct internet connection possible.

But generally, your setup shall also work if routing between the both subnets is allowed and the communication between exchange and AD isn't blocked.