On-prem Overview

Step	Description
Set Up Email Routing in xorlab	Mandatory. Configure xorlab to accept and forward emails properly in your environment.
Forward emails in Monitoring or Inline mode	Mandatory. In Monitoring mode, you send just copies of emails to xorlab. In Inline mode, you route emails via xorlab for active protection. See Before you begin and below for more information. Here we provide instructions for common systems. Monitoring: Cisco ESA or Exchange Inline: Exchange If your system is not listed—for example Cisco ESA in Inline mode, or any other MTA—contact support@xorlab.com and we will guide you through the setup.
Add Your Trusted Infrastructure	Mandatory. Configure your trusted email infrastructure in xorlab to allow proper detection.
Enable SAML or LDAP Login	Optional. Allow SAML-based or LDAP-based user login to xorlab.
Integrate Reported Emails	Optional. Integrate the Abuse Mailbox such that reported emails are handled by xorlab.

Step

Description

Mandatory. Configure xorlab to accept and forward emails properly in your environment.

Forward emails in Monitoring or Inline mode

Mandatory. In Monitoring mode, you send just copies of emails to xorlab. In Inline mode, you route emails via xorlab for active protection. See Before you begin and below for more information. Here we provide instructions for common systems.

Monitoring: Cisco ESA or Exchange
Inline: Exchange

If your system is not listed—for example Cisco ESA in Inline mode, or any other MTA—contact support@xorlab.com and we will guide you through the setup.

Add Your Trusted Infrastructure

Mandatory. Configure your trusted email infrastructure in xorlab to allow proper detection.

Enable SAML or LDAP Login

Optional. Allow SAML-based or LDAP-based user login to xorlab.

Integrate Reported Emails

Optional. Integrate the Abuse Mailbox such that reported emails are handled by xorlab.

Monitoring mode diagrams

In Monitoring mode, xorlab receives only a copy of every email and discards it after processing. The copy can be setup either on the gateway or on the Exchange server.

EvaluationIf you plan to evaluate xorlab as an add-on to an existing solution, setup the BCC on the Exchange server. In this way you can quickly evaluate the additional security that xorlab provides on top.

The diagrams show Exchange and a generic gateway, but the interface is plain SMTP: any other MTA or secure email gateway can take the place of the gateway shown. See Advanced SMTP Configurations for multiple next hops, per-domain routing, and TLS enforcement.

Multi-Tenancy

If you protect more than one organization with the same xorlab instance, follow Add a Tenant instead of the table above. It uses the same guides, but adds the per-tenant configuration around them:

Configure the domains and routing of the tenant with the topology that matches your setup, see Configure Tenant Domains and Routing.

Set up SAML or LDAP per tenant, see Enable Tenant Login.

Configure the trusted infrastructure per tenant or in a shared config template, see Trusted MTAs In-Depth.

Assign reported emails to the right tenant, see Assign Reported Emails to Tenants.

On-prem Overview

Inline mode diagrams

Gateway simple

Gateway advanced

Add-on

Monitoring mode diagrams

BCC from gateway

BCC from Exchange

Multi-Tenancy

​Inline mode diagrams

Gateway simple

Gateway advanced

Add-on

​Monitoring mode diagrams

BCC from gateway

BCC from Exchange

​Multi-Tenancy

Inline mode diagrams

Monitoring mode diagrams

Multi-Tenancy