Start a conversation

Configuring Remote (SMTP) Journaling for Exchange 2013/2016

Pre-requisite

These instructions are for the current archive service, not the legacy archive.

Journaling In Exchange 2013/2016

Exchange 2013/2016 provides several methods for journaling, including:

  • Option 1: Remote (SMTP) journaling 
    • A copy of all email sent or received by the entire organization or members of a defined security group to an external SMTP address. Proofpoint Essentials provides you with the SMTP address to use for this configuration.
  • Option 2: Journaling via IMAP
    • A copy of all email sent to received by the entire organization or members of a defined security group to a local mailbox. Proofpoint Essentials can connect to the mailbox via an IMAP connection. 

While the Essentials Email Archive supports both methods, remote (SMTP) journaling is the preferred configuration method.


Option 1: Configuring Remote (SMTP) Journaling For Exchange 2013/2016

You can choose one of the following options:

  • Enable journaling for the entire enterprise by creating a journaling rule to send messages from the Hub Transport Server to Proofpoint Essentials SMTP Contact. Hub Transport-level journaling is only supported in the Enterprise version of Exchange 2010.

  • Configure your mailbox databases to point to a Proofpoint Essentials SMTP Contact. Enabling journaling for individual mailbox databases also requires you to configure the mailbox databases to point to the Proofpoint Essentials SMTP Contact.

Step 1: Configure an External Contact

Note: Remote Journaling should be enabled directly to Proofpoint Essentials SMTP contact, not by using the forwarding rule.
  1. In the Exchange Admin Center, navigate to Recipients, and select Contacts.

  2. Click the "+" icon followed by Mail Contact.

  3. Enter a first name (SMTP), last name (Connection), display name (SMTP Connection), name (SMTP Connection), and alias (Journaling).

  4. in the External email address field enter the email address of the SMTP address provided when you created a connection in Proofpoint Essentials (e.g. uniqueaddress@us.earchive.cloud).

  5. Click Browse and select the desired Organization unit.

  6. Click Save.

Step 2: Configure Send Connector

  1. In the Exchange Admin Center, navigate to mail flow, and select Send Connectors.

  2. Add a send connector (click the "+" sign)

  3. Enter a descriptive Name for the connector.

  4. For Type, select Custom.

  5. Click Next.

  6. Under Network settings select MX record associated with recipient domain.

  7. Click Next.

  8. Click "+" to edit Address space.

  9. Set Type to SMTP.

  10. For Full Qualified domain name (FQDN): enter "*.earchive.cloud".

  11. Set Cost field to 1.

  12. Click Save.

  13. Click Next.

  14. Click "+" to edit Source server.

  15. Select the transport server(s) that will be associated with the connector.

  16. Click Add.

  17. Click OK.

  18. Click Finish.

Step 3: Configure Journaling

Option A: To configure journaling for individual mailbox databases:

  1. In the Exchange Admin Center, navigate to servers, and select databases.

  2. Select a database value and click the pencil (edit) icon.

  3. Click maintenance.

  4. Click Browse and choose the contact created in the previous procedure, then click OK.

  5. Click Save.

Repeat these steps for the other mailbox databases.

Option B: To configure journaling for the entire enterprise:

  1. In the Exchange Admin Center, click compliance management (in the list of the left)

  2. Click the journal rules tab.

  3. Add a new journal rule (click the “+” sign).

  4. In the Send journal reports to field, enter the email address of the journaling mailbox (e.g. uniqueaddress@earchive.cloud) created when you added an SMTP connection on Proofpoint Essentials.

  5. Enter a descriptive Name for the rule.

  6. From the If the message it sent to or received from... list, choose Apply to all messages.

  7. From the Journal the following messages... list, choose All messages.

  8. Click Save.

Step 4: To specify an alternate journaling mailbox (Exchange 2016):

It is recommended that you specify an alternate journaling mailbox in case the SMTP connection stops accepting traffic. You can then create an IMAP connection to collect any messages that were not sent via SMTP.
  1. In the Exchange Admin Center, click compliance management (in the list of the left)

  2. Click the journal rules tab.

  3. Click Select Address next to Send undeliverable journal reports to.

  4. In the NDR for undeliverable journal reports window that opens, click Browse.

  5. Select a mailbox in the dialog box and click OK.

  6. Click Save.

     

     

*The information in this article is correct as of Oct, 2017*
Choose files or drag and drop files
Was this article helpful?
Yes
No
  1. Carlos Rios

  2. Posted
  3. Updated

Comments