Email Protection

Follow the steps below to lock down your inbound email flow in Office 365 to only accept email from your Email Protection. This requires you to create a receive connector in Office 365.

• Log in to your Office 365 Exchange Admin Center (EAC).
  
  Note: If you are using Microsoft 365 Defender, log in to security.microsoft.com and select 'Exchange message trace' from the sidebar menu to open your Exchange Admin Center.

• Select 'Add a connector' and the New connector window displays. Select Partner organization as shown:
  
  
• Select 'Next' and the Connector name window displays. 
  
  
• In the Name field, give the connector a meaningful name. For example, Email Protection to Office 365. Select 'Next'.
  
  
• In the Authenticating sent email window:
  
  
• Select 'By verifying that the sender domain matches one of the following domains'.
  
  
• Enter * in the dialog box and select
  
  
• Select 'Next'
  
  
• In the Security restrictions window:
  
  
• Select 'Reject email messages if they aren't sent over TLS.'
  
  Note: This option requires that outbound TLS is enabled in Email Protection.
  
  
• Select Reject email messages if they aren't sent from within this IP address range and enter your Email Protection IP address. See Email Protection Servers.
  
  
• Select to save the IP you entered
  
  
• Select 'Next'

• The Review connector page displays the information you entered above. After verifying the information is correct, select 'Create connector'.