G DATA Mail Protection

Open PowerShell. Enter the following command to install the Exchange Online management module:

Respond to the prompts with Y.

Start the connection using the following command:

Replace the user MaxMustermann@x-company.cloud with your own user account!

A sign-in window opens. Enter your password here.

Continue with the section
Create connectors and a rule using Exchange Online PowerShell

Open Exchange Online PowerShell and sign in to Office 365. (For assistance, see the section
Configure Windows PowerShell to connect to Microsoft 365)

Create a new outbound connector using the following command:

Create a rule using the following command:

Replace the domains x-company.cloud and x-company.onmicrosoft.com with your own domain names.

Create a new inbound connector using the following command:

Open the Exchange admin center and sign in.

Select Mail flow and Connectors.

Click Next.

Click .

Select:

Click Next.

Enter the name G DATA 365 Mail Protection and, optionally, a description. Select the Turn it on checkbox.

Click Next.

Select: Only when I have a transport rule set up that redirects messages to this connector.

Click Next.

Select: Route email through these smart hosts and enter mailprotection.gdata.de as the smart host. Use + to add it to the smart host list.

Click Next.

Select: Always use Transport Layer Security (TLS) to secure the connection (recommended) and Issued by a trusted certificate authority (CA).

Click Next.

Create a list containing at least one of your email addresses for each domain (add addresses using +), then click Validate to validate the connector against these email addresses.

This test should complete without errors. If problems occur, refer to our connector configuration notes, among other resources.

Click Next.

Review the settings in the summary and click Create connector.

Click Done.

Click .

Select:
Connection from: Partner organization

Click Next.

Enter the name G DATA Mailprotection Inbound Secure Connector and, optionally, a description. Select the Turn it on checkbox.

Click Next.

Select By verifying that the IP address of the sending server matches one of the following IP addresses, which belong to your partner organization.

Enter the IP range 194.156.84.32/28 and use + to add it to the list.

Click Next.

Select the checkbox to reject email messages if they are not sent over TLS.

Click Next.

Review the settings in the summary and click Create connector.

Click Done.

Open the Enhanced filtering page.

The inbound connector you just created is listed here with Enhanced filtering disabled.

Click the row for the G DATA Mailprotection Inbound Secure Connector connector. An editing panel opens on the right side of the screen.

Select Skip these IP addresses that are associated with the connector:. Enter the IP range 194.156.84.32/28.

Select Apply to entire organization and click Save.

Filtering for the connector is now displayed as On.

Go to Mail flow and Rules.

Click and select Create a new rule.

Enter Redirect to mailprotection.gdata.de as the rule name.

Under Apply this rule if, select the following values from the drop-down menus:

The sender and is external/internal

A side panel opens on the right side of the screen.

Select Outside the organization and click Save.

Use + to add a new AND condition and select The recipient and domain is from the drop-down menus.

Create a list of all domains to be scanned by G DATA Mail Protection. If there are multiple domains, each domain must be entered individually and added to the list using the Add button.

Then click Save.

Under Do the following, select the following values from the drop-down menus:

A side panel opens on the right side of the screen.

Select the G DATA 365 Mail Protection connector and click Save.

Under Except if, select the following values from the drop-down menus:

A side panel opens on the right side of the screen.

Enter the following IP range: 194.156.84.32/28 and click Save.

Click Next.

Configure the following settings for the rule:

Rule mode = Enforce Severity = High

Click Next.

Review the settings and click Finish.

Click the row for the rule you created in the Exchange admin center and enable the rule using the toggle in the panel that opens on the right side of the screen.