m10 exo mail flow v1.4

8/16/2019 M10 EXO Mail Flow v1.4

1/30

Module 10Exchange OnlineMail Flow

Presenter name

Presenter role


2/30

Conditions and Terms of UseMicrosoft Condential

This training package is proprietar and condential! and is intended onl for uses descri"ed in the training materials# Conteto ou under a %on&'isclosure (greement and cannot "e distri"uted# Coping or disclosing all or an portion of the content asuch packages is strictl prohi"ited#

The contents of this package are for informational and training purposes onl and are pro$ided *as is* without warrant of animplied! including "ut not limited to the implied warranties of merchanta"ilit! tness for a particular purpose! and non&infrin

Training package content! including +,-s and other .nternet /e" site references! is su"ect to change without notice# ecausto changing market conditions! the content should not "e interpreted to "e a commitment on the part of Microsoft! and Microaccurac of an information presented after the date of pu"lication# +nless otherwise noted! the companies! organi2ations! pmail addresses! logos! people! places! and e$ents depicted herein are ctitious! and no association with an real compan! odomain name! e&mail address! logo! person! place! or e$ent is intended or should "e inferred#

Copyright and Trademarks3 4015 Microsoft Corporation# (ll rights reser$ed#

Microsoft ma ha$e patents! patent applications! trademarks! coprights! or other intellectual propert righmatter in this document# Except as expressl pro$ided in written license agreement from Microsoft! the furndocument does not gi$e ou an license to these patents! trademarks! coprights! or other intellectual prop

Compling with all applica"le copright laws is the responsi"ilit of the user# /ithout limiting the rights undthis document ma "e reproduced! stored in or introduced into a retrie$al sstem! or transmitted in an for6electronic! mechanical! photocoping! recording! or otherwise7! or for an purpose! without the express wriMicrosoft Corporation#

For more information! see Use of Microsoft Copyrighted Content athttp8))www#microsoft#com)a"out)legal)permissions)

Microsoft9! .nternet Explorer9! Outlook9! :k'ri$e9! /indows ;ista9!


3/30

O$er$iew

>

This module co$ers the mail @ow capa"ilities of Eincluding

• Transport rules• OAce >?B Message Encrption

• Message tracing

• .n"ound and out"ound connectors


4/30

O"ecti$es

5

(fter completing this module! ou will "e a"le to8

• Create transport rules to perform actions on m

tra$ersing through the transport pipeline• Trace messages sent to external organi2ations

• Create connectors to enforce encrption for mspecic domains


5/30

,ules

B


6/30

Tpes Of

,ules

?

Transport Rules

• -et ou appl messaging policies to messages in the

•

(ctions! such as redirecting a message or adding recprotecting messages! and reecting or silentl deletin

"e taken

Transport Protection Rules

• (dministrators can use transport protection rules to

messaging policies to inspect message content! encr

email content! and use rights management to contro

content

Outlook Protection Rules

• .n Exchange Online! Outlook! and O/( users and ad

appl .nformation ,ights Management 6.,M7 protectiappling an (cti$e 'irector ,ights Management :er

rights polic template# This reuires an (' ,M: depl

organi2ation


7/30

Transport

,ules

D

• +se transport rules to look for specic conditio

messages that pass through our organi2ation

on them

• Transport rules allow ou to8& Pre$ent inappropriate content from entering or le& Filter condential organi2ation information& Track or cop messages that are sent to or receiindi$iduals& ,edirecting in"ound and out"ound messages for

deli$er& (ppling disclaimers to messages as the pass torgani2ation

• ou can onl create a maximum of >00 transport Online


8/30

Transport

,uleComponents

( transport rule consists of the following compon

• Conditions: identif the messages that ou wappl to

• Actions: specif what ou want to do to the mare identied " the conditions

• Exceptions: o$erride conditions and pre$ent

acting on specic messages

• Choose a mode for this rule: 6Enforce! Test Test without Polic Tips7


9/30

Gow to

Create a%ew ,uleH

I


10/30

Transport

,ules $iaPower:hell

10

• Gow to create a %ew Transport ,ule

New-TransportRule -Name "Mark messages fro

to Sales DG" -FromScope NotInOrganiation -SDepartment" -!repenSu#$ect "%&ternal mess

DG'(

• Gow to $erif the ,ule was created

Get-TransportRule "Mark messages from the I

DG(

• Gow to $iew all rules in our Exchange Online

Get-TransportRule


11/30

Encrption

11


12/30

OAce >?B

MessageEncrption

14

OAce >?B Message Encrption is a new ser$ice that lets ou seemails to people outside our compan

Admin:• :imple to pro$ision and congure

• Polic dri$en $ia Transport ,ules

• Customi2a"le "randing of encrpted emails and mail reading

• (llows for Enterprise content inspection and compliance

ender:

• ("ilit to send encrpted messages to an :MTP address reg

recipientJs client or ser$ice pro$ider

Recipient:

• ;iew encrpted messages on OAce >?B Message Encrption

• OAce >?B Message Encrption portal has rich O/( controls

composing messages

• ,eplies from the portal are also encrpted


13/30

(dmin

Conguration

1>

• Ena"le (2ure ,ights Management ser$ice# Thiwith E> K E5 licenses

•Create a transport rule $ia E(C or Power:hell encrption to outgoing messages that match


14/30

,ecei$ing

andrespondingtoencrptedmessages

15

• /hen an external recipient recei$es an encrpted from our compan the see an encrpted attachm

instructions on how to $iew the encrpted message

• To $iew the message! open the attachment and a n

window will open asking them to log into the MessEncrption we"site

• The Message Encrption interface is "ased on Outl

• ( 1&time use passcode! an OAce >?B .'! or Microso

is reuired to login and $iew the message

• /hen the recei$er replies to the sender of the encr

message or forwards the message! those emails arencrpted


15/30

Gow it

works

1B

Exchange Online

Policy detection andEnforcement

Tenant

configuration

O365 User S e n

d

Microsoft

account/Organiation

!ccount

Mail "eading Portal

# e l i $ e r


16/30

Message Tracking

1?


17/30

Message Trace

1D

• The message trace feature ena"les an adminemail messages as the pass through our Ex

or Exchange Online Protection ser$ice• .t helps ou determine whether a targeted em

recei$ed! reected! deferred! or deli$ered " ththe past I0 das

• .t also shows what actions ha$e occurred to th"efore reaching its nal status

• O"taining detailed information a"out a speci

ou eAcientl answer our userJs uestions! tmail @ow issues! $alidate polic changes! andneed to contact technical support for assistan


18/30

Gow to ,una Message Trace

1

• %a$igate to Mail !lo" # Message Trace in

• :elect !ields 6to narrow search7

• Options include8• :ender

• ,ecipient

• Message was :ent or ,ecei$ed

• 'eli$er :tatus or Message .'

• Click earch to run the Message Trace


19/30

;iewMessage Trace,esults

1I

• (fter running a search! the results will "e liste

Message Trace Results pane "elow the sea

•

The following information is displaed a"out e• 'ate

• :ender

• ,ecipient

• :u"ect

• :tatus

• Each column can "e sorted " clicking on the Clicking it will switch the current sort order

• .f results exceed B00 entries there will "e a pa

section which will appear for use


20/30

Message Tracing $iaPower:hell

40

• +sing $et%MessageTrace to see information

Get-MessageTrace -Sener)ress $ohn*cont

-StartDate ,./0.1,/1 -%nDate ,./2.1,/1

• O"tain more detailed information " pipelininthe Let&MessageTrace'etail cmdlet

Get-MessageTrace -I 1##a0aa343c4#a51-Sener)ress $ohn*contoso+com -StartDate-%nDate ,./2.1,/1 8 Get-MessageTraceDeta


21/30

(ccepted

'omains

41


22/30

(ccepted'omains

44

• (n accepted domain is an :MTP namespace cloud&"ased email organi2ation sends or recei

•

Can "e used to assign prox addresses to usecongure mail routing

• 'omains are added using the Microsoft OAce center or through /((' Power:hell

• 'omains default as (uthoritati$e domains


23/30

'omain Tpes

4>

Authoritati&e

• (ll recipient mail"oxes in that domain are hos

Online and all email is deli$ered directl to Ex• More than one accepted domain can "e cong

authoritati$e

• ,euired for 'irector&ased Edge locking

'nternal Relay

• ,esponsi"ilit for mail deli$er is shared "etw

Online and another messaging sstem

• Tpicall! our on&premises messaging sstem

rst and then relas mail to the .nternet for deExchange Online recipients


24/30

Connectors

45


25/30

Connector Tpes

4B

• Connectors are used to control in"ound and o@ow

•

/ith connectors! ou can route mail to and rerecipients outside of our organi2ation! a partsecure channel! or a message&processing app

• The most commonl used connector tpes areconnectors! which control out"ound messagesconnectors! which control in"ound messages

• Connectors can "e congured to enforce .P addomain restrictions! as well as T-: encrptionin"ound and out"ound mail


26/30

+singConnectors

4?

• Mail @ows into and out of Exchange Onlinewithout the need to create an in"ound orconnectors " default

• Create connectors when ou need to custoand out"ound mail @ow "etween8

• Exchange Online and On&Premises

• Exchange Online and External ,ecipien

• Exchange Online and Partner Organi2at

(n example scenario where connectors using T-: arcreated to enforce encrpted mail @ow "etween EOP a

a partner


27/30

-a"8 Mail Flow

4D


28/30

Module,e$iew

4

1# Gow far "ack can ou trace a messageH

4# /here do ou add accepted domainsH

># Explain the use of connectors#


29/30

Module:ummar

>0

.n this module! ou learned a"out8

• ,ules

•

'eli$er ,eports• Message Trace

• (ccepted 'omains

• Connectors


30/30

3 4014 Microsoft Corporation# (ll rights reser$ed# Microsoft! /indows! /indows ;ista and other product names are or ma "e registered tr

in the +#:# and)or other countries# The information herein is for informational purposes onl and represents the current $iew of Microsoft Co

this presentation# ecause Microsoft must respond to changing market conditions! it should not "e interpreted to "e a commitment on the

Microsoft cannot guarantee the accurac of an information pro$ided after the date of this presentation# M.C,O:OFT M(NE: %O /(,,(%T:T(T+TO,! (: TO TGE .%FO,M(T.O% .% TG.: P,E:E%T(T.O%

3 401> Microsoft Corporation# (ll rights reser$ed# Microsoft! /indows! /indows ;ista and other product names are or ma "e registered tr

in the +#:# and)or other countries# The information herein is for informational purposes onl and represents the current $iew of Microsoft Co

this presentation# ecause Microsoft must respond to changing market conditions! it should not "e interpreted to "e a commitment on the

Microsoft cannot guarantee the accurac of an information pro$ided after the date of this presentation# M.C,O:OFT M(NE: %O /(,,(%T:T(T+TO,! (: TO TGE .%FO,M(T.O% .% TG.: P,E:E%T(T.O%

m10 exo mail flow v1.4

Documents