About

This document will guide you through the configuration of Virtru Gateway rules backed by Office 365 infrastructure.

Assumptions:

• CNAME Records Created so Virtru can sign DKIM and the virtrugateway.com domain can send on behalf of your domain. 
• TXT Records Created so Virtru can verify domain ownership prior to implementation.
• Mail Flow The Virtru Hosted Gateway is preconfigured for maximum security and interoperability between systems.

(Example)

• Mail Encryption Trigger:
  • Sender is Inside the Organization
  • Recipient is Outside the Organization
• Mail Flow: Gmail > Gateway > Final Delivery
• Authorization
  • X-Virtru-Auth: 00000000000000000000 (Virtru provided)

Note

The Authorization Header is specific to your organization and will be provided to you by Virtru.

Jump To:

Diagram of Standard Mailflow
Create Send Connector
Create Transport Rule
Create Virtru Encryption Rule 

Diagram of Standard Mailflow

Create Send Connector 

1. Login into the Admin Console  - https://admin.exchange.microsoft.com/

3. Click on the “Mail flow” dropdown and select “Connectors”

5. Click “Add Connector”

• From: Office 365
• To: Partner Organization

6. Name the Connector - e.g. Virtru Hosted Gateway Outbound

• Enter a description (Optional)

7.  When to use this connector

• Only when I have a transport rule setup that redirects message to this connector

8. How do you want to route email messages

• Route email through these smart hosts
  • smtp.virtrugateway.com

9. How should Office 365 connect to your partner organization's email server

• Always use TLS
• Issued by a trusted certificate authority (CA)

10. Validate Connector

• Connector may need to be validated
  • The connector test message may fail since the Auth header is not in place yet, this is ok

Create Transport Rule

1. Navigate to the Mail Flow Section

2. Navigate to the Rules Tab

Add New Rule

Enter Rule Details

• Name
  • Virtru + Nightfall
• Conditions
  • The Sender is located: Inside the organization
  • The Recipient is located: Outside the organization
• Actions
  
  
  • Add Header
    • Name: X-Virtru-Auth
    • Value: <Virtru Provided>
  • Use the following connector: Virtru Hosted Gateway Outbound
• Exceptions
  • If Header Exists
    • Name: X-Virtru-Gateway-Version
    • Value: saas

Diagram

Set rule settings to match your policy 

Click review and Finish.

Please refer to your Nightfall dashboard to complete your Rule setup.

Getting Started with Nightfall