- Using BCC monitoring sends an additional copy of each email to xorlab, which can lead to hitting the external recipients rate limit (tenant ERRL) of Microsoft Exchange.
- You can monitor how close you are to the limit under: Reports → Mail flow → Outbound external recipients
Create mail flow rule
-
Go to Exchange Admin Center → Mail flow → Rules and create a new rule:
-
Configure the rule like this:
- Name:
IncomingBCCxorlab - Apply this rule if → The sender → is external/internal → Outside the organization
- Click the plus icon (
+) to add another condition - And → The recipient → is external/internal → Inside the organization
- Do the following → Add Recipients → to the Bcc box → enter
monitor@mx.xyz.activeguard.cloud, wherexyzis your customer ID
- Name:
- Click through Next → Finish and leave all settings at their defaults.
-
Repeat steps #2-3 to add another rule but this time set:
- Name:
OutgoingBCCxorlab - The sender → Inside the organization
- The recipient → Outside the organization
- Name:
- Enable both rules in the Rules page.
Create a connector
In addition to the mail flow rule above, we need to create a connector to make sure the emails are sent directly to xorlab.Additional information
Additional information
We recommend to always create a connector to ensure proper email delivery. However, you can omit the connector if the following two conditions are met:
- You do not have any other connectors that might interfere with the BCC emails sent to xorlab.
- You do not have a hybrid MS setup with an on-prem-only email delivery (Centralized Mail Transport).
-
Go to Exchange Admin Center → Connectors → add a connector:
-
Connection from → Office 365, and Connection to → Your organization’s email server:
-
Set the name to
Microsoft365Toxorlaband enable Retain internal Exchange email headers:
-
Choose the third option and enter
mx.xyz.activeguard.cloud, wherexyzis your customer ID. Click the plus (+) icon:
-
Add a new smart host with the value
mx.xyz.activeguard.cloud, wherexyzis your customer ID:
-
Activate Always use Transport Layer Security… and select Issued by a trusted certificate authority (CA):
-
Enter a company mailbox where a validation email should be sent to:
Unsuccessful validationThe connector validation might fail at this point. If this happens, save the connector without validation, and then validate the connector again. - Review the connector and click Create when it’s OK.
Optional: Include internal emails
Per default, xorlab only processes incoming and outgoing emails. However, if you want to include also internal emails, do the following:- Remove one of the two mail flow rules from above
- Rename the existing one to
BCCxorlab - Change Apply this rule if to Apply to all messages and remove the And condition
