Forward inbound Emails to Cloud ESA to an External Account

[anotthak8]

I would like to know if it’s possible for the inbound cloud IronPorts ESA to take an inbound email and forward it back out to an external email account without reaching our environment. Any insight or information will be helpful. Thank you!

[Ken Stieers]

Yes... assuming you build policy/routes/filters to do so.

Something like a mail redirection for an ex-employee? 

[anotthak8]

Pretty much. Can this be accomplished by just some configuration changes for the inbound ESA?

[Ken Stieers · Accepted solution]

Yes. Easiest would be a content filter.  Something like this should work:

Then enable it in your policy.

Are you using an LDAP accept query/Directory Harvest Protection?  If so, you'll have to have something in your LDAP with the email address, otherwise the mail will be dropped or bounced before you can do any magic with it.

[anotthak8]

I am not using LDAP. Thank you for the insight!

[anotthak8]

If LDAP was used, do you know what exactly would have to be done to forward email addresses?

[Ken Stieers]

One easy thing would be to have an object that still had the email address on it.  For Exchange, I'd either keep the account around, or if you're deleting accounts, create a contact with a completely bogus display name and just add SMTP addresses of the account(s) you do this for.

I'm pretty sure there's a way to do it in the ESA, but I can't seem to find it right now.