About

This document will guide you through the configuration of Virtru Gateway rules backed by Office 365 infrastructure.

Assumptions:

• CNAME Records Created so Virtru can sign DKIM and the virtrugateway.com domain can send on behalf of your domain. 
• TXT Records Created so Virtru can verify domain ownership prior to implementation.
• Mail Flow The Virtru Hosted Gateway is preconfigured for maximum security and interoperability between systems.

(Example)

• Mail Encryption Trigger:
  • #secure# in Subject
  • Sender is Inside the Organization
  • Recipient is Outside the Organization
• Mail Flow: Gmail > Gateway > Final Delivery
• Authorization
  • Header 00000000000000000000

Jump To:

Diagram of Standard Mailflow
Create Send Connector
Create Transport Rule
Create Virtru Encryption Rule 

Diagram of Standard Mailflow

Create Send Connector 

1. Login into the Admin Console  - https://portal.office.com

2. Navigate to the Exchange Admin Portal

3. Navigate to the Mail Flow Section

4. Navigate to the Connectors Tab

5. Create a new Connector

• From: Office 365
• To: Partner Organization

6. Name the Connector - e.g. Virtru Hosted Gateway Outbound

• Enter a description (Optional)

7.  When to use this connector

• Only when I have a transport rule setup that redirects message to this connector

8. How do you want to route email messages

• Route email through these smart hosts
  • smtp.virtrugateway.com

9. How should Office 365 connect to your partner organization's email server

• Always use TLS
• Issued by a trusted certificate authority (CA)

10. Validate Connector

• Connector may need to be validated
  • The connector test message may fail since the Auth header is not in place yet, this is ok

Create Transport Rule

1. Navigate to the Mail Flow Section

2. Navigate to the Rules Tab

Add New Rule

Enter Rule Details

• Name
  • Virtru Hosted Gateway Outbound
• Conditions
  • The Sender is located: Inside the organization
  • The Recipient is located: Outside the organization
  • Subject Contains: #secure#
• Actions
  
  • Add Header
    • Name: X-Virtru-Auth
    • Value: <Virtru Provided>
  • Use the following connector: Virtru Hosted Gateway Outbound
• Exceptions
  • If Header Exists
    • Name: X-Virtru-Gateway-Version
    • Value: saas

Diagram

Create Virtru Encryption Rule 

Once the message is routed to the Virtru Hosted Gateway, a Virtru DLP Rule must be created and enabled to evaluate the message and encrypt.  Each Virtru DLP Rule is evaluated against each message sent to the Virtru Hosted Gateway.  The Virtru DLP Rules are shared between the Virtru Hosted Gateway and the Virtru Clients.

To create a rule follow this LINK