Microsoft Exchange BCC setup

For customers using Microsoft Exchange, setting up Email Security via BCC is quick and easy. You need to configure an inbound rule to send emails to Email Security via BCC for processing and detection of potential phishing attacks. The following email flow shows how this works:

Configure Inbound Rule

1. Access Exchange’s Management Console, and go to Organization Configuration > Hub Transport.

   

2. On the Actions pane, select New Transport Rule.

3. Give the transport rule a name and a description and select Next.

   

4. In the Condition configuration panel, select the option from users that are inside or outside the organization option. In the dropdown that opens, select Outside the organization.

   

5. Still in the same Condition configuration panel, add a second condition to the transport rule. Select sent to users that are inside or outside the organization, or partners. Keep the default value of Inside the organization.

   

6. Select Next.

7. In the Action configuration panel, select Blind carbon copy (Bcc) the message to addresses. Edit the addresses variable to add the addresses you want to copy as BCC.

   

8. In Specify Recipient, select the down arrow next to the Add button > External E-Mail Address.

   

9. Enter the BCC address provided by Email Security. This address is specific to your account.

   

10. Select OK > OK to return to the main configuration page of the transport rule.

11. At the main configuration page of the transport rule, select Next to continue to the Exception configuration panel.

12. You do not need to configure an exception rule. Select Next.

    

13. In Create Rule, select the New button.

    

14. Select Finish to close the transport rule configuration panel. This will return you to the Exchange Management Console.

    

Note

If you have multiple rules, you may need to change the order of the BCC rule and move it to the right location in your rule sequence. This is needed so you can send BCC messages to Email Security. Usually, the Email Security BCC rule will be at the top of the ruleset. The configured conditions of the Email Security BCC rule will only trigger for inbound messages.

Email processing and reports

In BCC mode, all emails are put through automated phishing detections by Email Security. Emails that trigger phishing detections are logged for reporting via product portal, email and Slack. Emails that do not trigger any detections are deleted.