Proofpoint Email Protection - Hosted Exchange Provisioning


Once you have added the Proofpoint offer to your service in our Portal, a ticket will be automatically created with our Support team. Someone will reach out to you to confirm that you have the necessary guides to complete your setup. They will also need to get involved at the end of your setup to complete the steps that are required directly on the Hosted Exchange Server.



Choose your subscription

1. In the Proofpoint console, under Account Management, select Licensing and Billing

  1. Click on Purchase on the product you'd like the organization to have. You will need to select the package if you select Email Security. For a complete list of features, see this documentation. Note: you will need to be logged in on Proofpoint before accessing this document. 

 

Add Your Custom Domains

NOTE: Each step in this section must be completed for EVERY DOMAIN AND DOMAIN ALIAS that you have (including proxy). Create the default domain that was first used to purchase the service, and then add any additional domains in your Sherweb Control Panel.  

 

1. In the Proofpoint console, under Account Management, select Domains.

  1. Click on the 3 dots at the far right of the line of the primary domain and select Edit domain.
  2. Domain type: Relay
  3. Primary Delivery Destination: See grid below
  4. Add Alternate Failover: See grid below
  5. Click Save.
  6. Click on New Domain.
  7. Repeat for any additional domains you have in your Exchange Control Panel.
     

 

SMTP Host Address

Exchange 2016

mx14-1.mycloudmailbox.com

mx14-2.mycloudmailbox.com

Exchange 2019

mx19-1.mycloudmailbox.com
mx19-2.mycloudmailbox.com


2. Verify all the domains.

  • Select the Domains tab again on your navigation bar.
  • Each domain will need to be verified.

    Note: The Sherweb proxy domains will be verified by Sherweb support at the end of this process.
  • Click on the 3 dots at the far right of the line each domain and select Verify domain.
  • Take note of the text below the Value/answer/definitions
  • Click on Verify Later.

  

 

Further reading:

https://help.proofpoint.com/Proofpoint_Essentials/Email_Security/Administrator_Topics/030_domains/Testing_domains/Verifying_relay_domains


Configure Outbound Servers

1. Select the Domains tab on your navigation bar.

2. Click New Sending Server.

 


3. Add each of the outbound IPs as per the grid below.  

 

 

Server IP Address Range

Exchange 2016

207.126.101.0/24

Exchange 2019

199.244.76.0/24

173.46.152.128/25


4. Add the name of the platform in the Description field.


5. Click Save to finish.


6. Wait at least 30 minutes for changes to take effect.


Enable Mail Relay

1. Once the Domain entries have been verified do not forget to “turn on” the relay.

 

 

Export and Import Sherweb Users

NOTE: If you do not have many users, you can skip this step and the next one (Create Users in Bulk) and instead create user manually by scrolling down and following the section Create User Individually.

1. Log on to the Sherweb control panel.


2. Browse to the organization > Users > Export users


3. Select CSV


4. Ctrl+click to select First Name, Last name, Mailbox primary alias, Phone number, Other Mailbox Aliases

 

Note: it is possible to also export Aliases by selecting the Other mailbox aliases, however this will require that the csv file be formatted to remove the empty aliases columns manually (you will need to remove a lot of commas from the csv file because it looks like this:)

 

 

5. Open the CSV in Excel.

6. Delete the Title Line (1)

7. Sort Ascending by the 3rd. column.

8. Delete lines without a Primary mailbox.

9. Delete the following lines:

 

"Exported users for ""sherweb.com""",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

"All dates shown are using the ""(UTC-05:00) Eastern Time (US & Canada)"" time zone.",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

 

10. Save as CSV (Comma delimited). Your file should look like this (don't worry about the extra commas):

 



Create users in bulk

1. In the Proofpoint console, go to User Management > Import & Sync > CSV Import

 

 

2. Select the CSV file and click Upload, you will see if anything went wrong.

 

Create Users Individually

NOTE: Use these steps instead of the two steps above if you do not have many users.


1. Select Add a User.

 



2. Fill in the First name, Surname.


3. In the Email Address fields, enter the user name (ex: mmcfly) and select the user's primary (@thefuture.com) domain from the dropdown menu.


4. (Optional) Enter the user's mobile number.


5. Select a Role for the user.


6. Click Save.


7. Repeat for each user you need to add.
 

 

Contact Sherweb Support

Reply to the support ticket that was created when you first added Proofpoint in our Portal. Let the technician know that you have completed the steps above. The technician will then be able to make the adjustments on the Hosted Exchange server (specifically, configure your Sherweb domain(s) to send outgoing mail to Proofpoint).


Change DNS records

When you are ready to start using Proofpoint Essentials as part of your mailflow, please make the following changes in the DNS for each domain that you have configured in Proofpoint.


Change MX records

Please change the MX records for each domain added to Proofpoint to reflect the values below:

mx1-us1.ppe-hosted.com (Preference of 10)

mx2-us1.ppe-hosted.com (Preference of 20)

Add or modify SFP record

Add of modify the SPF record for each domain added to Proofpoint to reflect the values below:

Exchange 2016

v=spf1 ip4:207.126.101.0/24 a:dispatch-us.ppe-hosted.com -all

Exchange 2019v=spf1 ip4:173.46.152.128/25 ip4:199.244.76.0/24 a:dispatch-us.ppe-hosted.com -all