Step by Step Guide:
Please follow the below steps in order. The following steps will ensure a seamless migration from the current mail filter service to the new mail filter service.
- Attend Training
- Build Your Rules
- Confirm Email Inbound Routes
- Confirm Email Outbound Routes
Upload Your Validation List for Your Domain(s) - Optional
Firewall Changes To Be Made
Note: Please leave your current SMTP configuration on your firewall initially as this will cater for our rollback plan.
The above steps need to be completed prior to the migration date, these can be implemented anytime as they will not affect your current environment.
The following steps must only be completed when IS instructs you to do so:
- Inbound Mail Flow Changes – Please set your mail to flow through the Mail Control solution
Outbound Relay - Set your email outbound relay address to flow through the Mail Control solution - Optional
Attend Training
An online training video is available. The following link will walk you through the email interface.
Build Your Rules
Rules are configured on the administration interface.
Once logged in:
Select ‘Configuration’ tab
Under ‘Email Services’ is where you will specify rules for Anti-Virus, Anti-Spam, Content Control, Image Control.
Confirm Email Inbound Routes
This is where you will define the public IP/hostname that email inbound for each of your domains needs to be routed.
Once logged in:
Select ‘Configuration’ tab
Select ‘Inbound Routes’
Confirm the populated IP/hostname for each domain is correct.
These IP’s can be technically checked by selecting ‘Check’ for each one. This is advisable as it will inform you of any issues.
Confirm Email Outbound Routes
This is where you will define all your public IP’s that will be sending outbound email to the service. These will be the only IP’s that the service will accept outbound email from.
Once logged in:
Select ‘Configuration’ tab
Select ‘Outbound Routes’
Confirm the populated IP’s are all the public IP’s that you send email from.
These IP’s can be technically checked by selecting ‘Check’ for each one. This is advisable as it will inform you of any issues.
Upload Your Validation List For Your Domain(s) - Optional
In order to enable the quarantine feature of the service you will need to enable address registration and upload a list of valid inbound email addresses. This list must be kept up to date otherwise mail destined for a user not on the validation list will not be accepted. The service will work without this, however when inbound email triggers a rule you will not have the option to quarantine that email. The validation list can be created either manually or via an AD sync.
Manual Upload:
Once logged in:
Select ‘Configuration’ tab
Select ‘Platform’
For each domain create a CSV file of email addresses, including aliases and distribution groups.
Select ‘Upload’ against your domain, and upload the domain specific CSV file.
Under Status click on ‘Off’ and set the address registration to ‘On’.
AD Integration:
Once logged in:
Select ‘Configuration’ tab
Select ‘Platform’
Select ‘Tools’
Follow the instructions
If you wish to enable quarantine, once you have completed the above steps, please send an email to SHS.validation@is.co.za with your organisation name and Account ID (initial username provided).
Firewall Changes You will need to ensure that your firewall will allow SMTP traffic from and to the service.
Please leave your current SMTP rules on your firewall as this will allow for a rollback in case of a failure.
Inbound Rules and Outbound Rules:
Please make all required changes as per the following:
Inbound Mail Flow Changes
Your email will need to traverse the new infrastructure. This change will need to be made for all domains. Please be aware that you may have more than one service that your inbound email currently traverses.There are 3 potential cases:
- Mail Filter Only
- Mail Filter and Preserv8 (current IS Archiving)
- Mail Filter and a 3rd Party Service
1. Mail Filter OnlyIf your email only traverses the Mail Filter service (your MX records currently point to xxx.mfw.is.co.za)
then: Please change your MX records to point to:
Pri 10 = cluster1.sa.messagelabs.com
Pri 20 = cluster1a.sa.messagelabs.com
2. Mail Filter and Preserv8 (current IS Archiving)
If your email traverses Mail Filter and Preserv8 then:Please change your MX records to point to:
Pri 10 = cluster2.sa.messagelabs.com
Pri 20 = cluster2a.sa.messagelabs.com
3. Mail Filter and a 3rd Party ServiceIf your email does not point directly to the Mail Filter service (for example it points to the IS anti-spam service or a 3rd party service before the Mail Filter service)
then:Please request the service provider to ensure that your MX records send inbound email from that service to:
Pri 10 = cluster1.sa.messagelabs.com
Pri 20 = cluster1a.sa.messagelabs.com
Change Your Outbound Relay Address
This is optional. If you would like to use the service to scan outbound emails this step will need to be completed.
If you are using Preserv8 (current IS Archiving) solution this step needs to be completed.
Mail Filter Only
Please set your email server to send outbound email to:
cluster1out.sa.messagelabs.com
Mail Filter and Preserv8
Please set your email server to send outbound email to:
cluster2out.sa.messagelabs.com