Disable Exchange Online Protection (EOP) in Hybrid Organization
Can you turn EOP in exchange online/O365 tenant ? we have an issue in our Hybrid Organization. Hybrid is configured as centralized transport so all traffic comes via on prem and we do have our own messaging gateway which is proofpoint. the issue is some external messages that is coming into our exchange organization and then going to mailbox in O365 getting blocked by EOP saying the IP is banned and those are the IPs from the pool of our NAT IP addresses i guess couple of them has bad reputation. either we want to add all of our NAT ip addresses as safe in sender.office.com which is crazy cuz it doent give you to add IP range or bulk and adding 100s of IPs one by one then confirming the email is almost impossible for me to do.
so is there a way to add bulk IPs in safe list in EOP or Disable EOP over all?
so is there a way to add bulk IPs in safe list in EOP or Disable EOP over all?
No you can't disable EOP, but yes adding your IP addresses to the safe list should help. You mentioned 100s of IPs, but you only need to add the external IPs and not the internal LAN IPs. You can add a range of IPs in CIDR format so that you can cover a range of IPs with a single entry.
It seems EOP does not treat the incoming email as trust email. check the email header, It should have:
X-MS-Exchange-Organization
does It?
X-MS-Exchange-Organization
does It?
There are a couple ways to bypass EOP. One is with Receive Connectors and Connection Whitelisting. Another is to configure Transport Rules to set all email from your IPs to Bypass. That is done by creating a new rule under Mail Flow > Rules, clicking More Options, selecting the options "Apply this rule" > "if the Sender" > "is inside the organization" then under "Do the following" > "Modify the message Properties" > "Set the spam confidenct level (SCL)" > "Bypass spam filtering"
This question needs an answer!
Become an EE member today
7 DAY FREE TRIALMembers can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
https://support.knowbe4.com/hc/en-us/articles/218134997-Whitelisting-by-IP-Address-in-Exchange-2013-2016-or-Office-365
Or you can also use Powershell command:
https://docs.microsoft.com/en-us/powershell/module/exchange/antispam-antimalware/set-hostedconnectionfilterpolicy?view=exchange-ps