ISE 2.7 office 365 secure SMTP Relay

[Martin Hart]

Hi All,

We are configuring ISE 2.7 for Relaying to office 365. We have a connector account in 365 and this authenticates with username and password and must come from a specific public IP. It is on port 25 so we still feel although this is authenticated it is not secure. We want to do this using the encypted option. I cant seem to find any guide that details how to do this using 365 securely. Can anyone share any examples of how they have achieved this.

[melvillec]

Hi Martin,

I used the SMTP AUTH client submission method. Below are the steps.

1: You need to import the outlook certificate in ISE Trusted Certificates. (Attached)

2: On ISE, configure the SMTP Server settings as below

      SMTP Server : smtp.office365.com
      SMTP Port    : 587
      Connection Timeout : 120

      Enable Use TLS/SSL Encryption option
      Enable Use Password Authentication (Enter the sign in credentials of the hosted mailbox being used)

Test Connection and Save

3: In the Guest Email Settings, Enable email notifications to guests and select Always send notifications from the default email address
Default 'From' email address (Enter the sign in credentials of the hosted mailbox being used)

Then validate by sending test emails from ISE. 

Regards,

Melville