Finalize Mail Aegis Setup - M365

Introduction
This guide is to be completed after the preparation step and the DNS configuration steps outlined in the configuration email you received.

Create a Connector

  1. Go to https://admin.cloud.microsoft/exchange#/connectors
  2. Click on Add a connector
  3. Select Partner organization then click Next
  4. In the Name field type CyberWarden MailAegis Inbound
  5. Optionally add a description
  6. Ensure that the “Turn it on” checkbox is enabled.
  7. Click Next
  8. Select the “By verifying that the sender domain matches one of the following domains” radio button
  9. Enter the * (wildcard) character
  10. Click Next
  11. On the Security Restrictions Page, ensure that only the “Reject email messages if they aren’t sent over TLS” and Reject email messages if they aren’t sent from within this IP address range” checkboxes are selected. Enter the following IP addresses individually into the IP addresses textbox:
  • 5.250.182.9
  • 85.215.201.235
  • 212.227.232.71
  1. Click Next
  2. On the Review Connector page, click the Create connector button, then click Done on the following page.

Configure Skiplisting

  1. Go to https://security.microsoft.com/skiplisting
  2. Click on the Cyber Warden MailAegis Inbound connector
  3. Select the Automatically detect and skip the last IP address radio button
  4. Select the Apply to entire organization radio button
  5. Click Save

Configure Basic Anti-Phishing Settings

  1. Go to https://security.microsoft.com/antiphishing
  2. Click on the Office365 / M365 policy
  3. In the Phishing threshold & protection section, click on Edit Protection Settings
  4. Select the following options, then click Save
  • Enable mailbox intelligence
  • Enable Intelligence for impersonation protection
  • Enable spoof intelligence
  1. In the Actions section, click on Edit Actions
  2. Select the following checkbox options:
  • Honor DMARC record policy when the message is detected as spoof
  • Show first contact safety tip
  • Show user impersonation safety tip
  • Show (?) for unauthenticated senders for spoof
  • Show “via” tag
  1. Select the following dropdown options:
  • If Mailbox Intelligence detects an impersonated user: Move the message to the recipients’ Junk Email folder
  • If the message is detected as spoof and DMARC Policy is set as p=quarantine : Quarantine the message
  • If the message is detected as spoof and DMARC Policy is set as p=reject : Reject the message
  • If the message is detected as spoof by spoof intelligence: Move the message to the recipients’ Junk Email folder
  1. Click Save
  2. Click Close

DKIM Configuration

  1. Go to https://security.microsoft.com/authentication
  2. On the Email authentication settings page, select the DKIM tab.
  3. On the DKIM tab, select the custom domain to configure by clicking anywhere in the row other than the check box next to the name.
  4. In the domain details flyout that opens, select the Sign messages for this domain with DKIM signatures toggle that’s currently set to Disabled
  5. A Client error dialog opens. The error contains the values to use in the two CNAME records that you create at the domain registrar for the domain.
  6. In your DNS Control Panel, create the DNS records as displayed in the domain details flyout. Leave this flyout open.
  7. After a while (try after 5 minutes, but this might take longer - in rare cases unto 48 hours), return to the domain properties flyout that you left open in Step 6 and select the Sign messages for this domain with DKIM signatures toggle. After a few seconds, a security dialog opens.
  8. After you select OK to close the dialog, verify the following settings on the details flyout:
  • The Sign messages for this domain with DKIM signatures toggle is set to Enabled .
  • The Status value is Signing DKIM signatures for this domain.
  • Rotate DKIM keys is available.
  1. Click Close.