SOLVED

Mailflow from O365 (Cloud) to Cisco Email Security Appliance for certain users

%3CLINGO-SUB%20id%3D%22lingo-sub-186040%22%20slang%3D%22en-US%22%3EMailflow%20from%20O365%20(Cloud)%20to%20Cisco%20Email%20Security%20Appliance%20for%20certain%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-186040%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20in%20the%20process%20of%20migrating%20our%20staff%20and%20faculty%20to%20Office%20365.%20We%20would%20like%20to%20have%20only%20staff%20and%20faculty%20route%20email%20to%20external%20recipients%20through%20our%20Cisco%20ESA%20device%20and%20have%20the%20students%20not%20use%20the%20ESA.%20I'm%20not%20quite%20sure%20how%20the%20setup%20in%20the%20Rules%20would%20look%20like%20and%20what%20the%20connector%20would%20look%20like.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EStaff%2Ffaculty%3C%2FP%3E%3CP%3EO365%20Email%20--%26gt%3BCisco%20ESA%20--%26gt%3B%20Internet%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EStudents%3C%2FP%3E%3CP%3EO365%20Email%20--%26gt%3B%20Internet%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20students%20mail%20domain%20is%20%40students.abc.edu%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20staffs%20mail%20domain%20is%20%40abc.edu%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20for%20any%20assistance%20that%20can%20be%20given.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-186040%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-186107%22%20slang%3D%22en-US%22%3ERe%3A%20Mailflow%20from%20O365%20(Cloud)%20to%20Cisco%20Email%20Security%20Appliance%20for%20certain%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-186107%22%20slang%3D%22en-US%22%3ECreate%20a%20conditional%20connector.%20The%20connector%20is%20conditional%20upon%20certain%20rules%20being%20fired.%3CBR%20%2F%3E%3CBR%20%2F%3EIn%20your%20case%2C%20the%20rule%20would%20be%20%22if%20sender%20domain%22%20or%20%22if%20sender%20is%20member%20of%20(staff%20group)%22%20then%20use%20the%20conditional%20connector.%3CBR%20%2F%3E%3CBR%20%2F%3EThe%20connector%20in%20your%20case%20would%20have%20a%20target%20of%20the%20Cisco%20device.%3CBR%20%2F%3E%3CBR%20%2F%3EFor%20the%20students%20don't%20do%20anything.%20Office%20365%20will%20route%20email%20without%20a%20connector%20to%20the%20internet%20automatically%3CBR%20%2F%3E%3CBR%20%2F%3EBrian%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1438381%22%20slang%3D%22en-US%22%3ERe%3A%20Mailflow%20from%20O365%20(Cloud)%20to%20Cisco%20Email%20Security%20Appliance%20for%20certain%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1438381%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F157%22%20target%3D%22_blank%22%3E%40Brian%20Reid%3C%2FA%3E%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20would%20like%20to%20included%20my%20specifc%20scenario%20(Outgoing%20email)%2C%20see%3A%3C%2FP%3E%3CP%3EO365%20Email%20--%26gt%3B%20Cisco%20ESA%20--%26gt%3B%20Internet%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20detail%20is...%20when%20mailbox%20destination%20included%20(%40hotmail.com%20%2F%20%40outlook.com)%2C%20only%20this%2C%20the%20messages%20goes%20to%20direct%20to%20Junkbox.%3C%2FP%3E%3CP%3EIf%20I%20remove%20the%20Cisco%20ESA%20of%20segment%2C%20the%20messages%20are%20delivered%20(non-Junkbox).%3C%2FP%3E%3CP%3EI%20have%20doubts%20if%20exist%20some%20feature%20side%20O365%20that%20I%20need%20exec%20the%20just%20fine%20tunning%20to%20addressing%20this%20specific%20case.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

We are in the process of migrating our staff and faculty to Office 365. We would like to have only staff and faculty route email to external recipients through our Cisco ESA device and have the students not use the ESA. I'm not quite sure how the setup in the Rules would look like and what the connector would look like.

 

So

 

Staff/faculty

O365 Email -->Cisco ESA --> Internet

 

Students

O365 Email --> Internet

 

The students mail domain is @students.abc.edu

 

The staffs mail domain is @abc.edu

 

Thank you for any assistance that can be given.

2 Replies
Highlighted
Best Response confirmed by Dominik Hoefling (MVP)
Solution
Create a conditional connector. The connector is conditional upon certain rules being fired.

In your case, the rule would be "if sender domain" or "if sender is member of (staff group)" then use the conditional connector.

The connector in your case would have a target of the Cisco device.

For the students don't do anything. Office 365 will route email without a connector to the internet automatically

Brian
Highlighted

Hi @Brian Reid,

 

I would like to included my specifc scenario (Outgoing email), see:

O365 Email --> Cisco ESA --> Internet

 

The detail is... when mailbox destination included (@hotmail.com / @outlook.com), only this, the messages goes to direct to Junkbox.

If I remove the Cisco ESA of segment, the messages are delivered (non-Junkbox).

I have doubts if exist some feature side O365 that I need exec the just fine tunning to addressing this specific case.