Outbound mail query of Ces

[Vishal6]

Hi All,

Have already running Ces instance for incoming and outgoing mails for domain xyz.com,xyz.co.in & xyz.in, where i have done configuration for both and inbound mail routing. Now we have procure one more instance just for outbound mail routing as we have Linux base post pix server that will be smtp server for it. Basically i need confirmation on below points for this new configuration

1. Does configuring dkim for new instance impact dkim working for existing instance

2. Below are the points i consider that will make my outbound mail flow through Ces. Kindly let me know if anything needs to be added

Outbound Connectors configuration in on-prem Exchanges to send outbound emails towards CES.(Configure Outgoing Email from on-prem to CES)

Configure RELAYLIST in CES for outbound mails

Configuration of outgoing Mail Policies.

Configure outgoing rule in on-prem towards CES

Outbound Mail verification through Cisco CES

[Ken Stieers]

1. No... you can export the DKIM key from your current CES instance, and import it to your new instance, and use the same selector/public key, and it will work. Just make sure you us e the same DKIM config on the new CES instance as well.
2. I think you're ok here...

[Vishal6]

Thank for you for your response.

So i can configure new dkim key and profile that also works.

[Ken Stieers · Accepted solution]

Yes.
You can use a separate DKIM profile on the new instance, that uses a different key set, and a different selector/dns record.

[Vishal6]

Hi Ken,

Do i need to update/add Spf record also the way i'm doing dkim ?

[Ken Stieers]

Yes, the spf record for the new domain needs to have the new CES instance IPs as well.

[Vishal6]

Domain will be same, we are only procuring new instance for outbound mails. I think we need to add new instance details in spf record as per below example ?

spf.hcxxxx-xx.ap.iphmx.com

[Ken Stieers]

Assuming that's the one for your new instance, yes, you add that to the SPF record for any domain it is delivering mail for... 

[Vishal6]

Does i need to add smtp routes also ?

[Ken Stieers]

Outbound mail should use dns not an smtp route.

[Vishal6]

Any update will be highly appreciated