Skip to main content
Welcome to Virtru's support portal. As we work to make this page more accessible to screen readers, please contact us at support@virtru.com for technical support.

Hosted Gateway Installation - Office 365 Inbound Decrypt

  • Updated

About

This document will guide you through the configuration of Virtru Gateway rules backed by Office 365 infrastructure.

Assumptions:

  • CNAME Records Created so Virtru can sign DKIM and the virtrugateway.com domain can send on behalf of your domain. 
  • TXT Records Created so Virtru can verify domain ownership prior to implementation.
  • Mail Flow The Virtru Hosted Gateway is preconfigured for maximum security and interoperability between systems.

(Example)

  •  
    • Mail Decryption Trigger:
      • X-Virtru-Decrypt NOT in Header
      • Inbound Messages
    • Mail Flow: Gmail > Gateway > MX > Gmail > Final Delivery
    • Authorization
      •  
        • X-Virtru-Auth: 00000000000000000000

Note

The Authorization Header is specific to your organization and will be provided to you by Virtru.

 

Jump to:

Diagram of Standard Mailflow
Connector Creation
Content Compliance Rule Creation
Create Virtru Encryption Rule
 

 

Diagram of Standard Mailflow

standard mailflow diagram

 

Create Connector

Office 365 navigation menu

  • Navigate to the Mail Flow Section
  • Navigate to the Connectors Tab

Office 365 admin center mail flow section

  • Create a new Connector
    • From: Office 365
    • To: Partner Organization

Mail flow scenario selection

  • Name the Connector
    • Ex: Virtru Hosted Gateway Inbound
  • Enter a description
    • Optional

connector naming and description

  • When to use this connector
    • Only when I have a transport rule setup that redirects message to this connector

new connector rule set up

  • How do you want to route email messages
    • Route email through these smart hosts
      • smtp.virtrugateway.com

new connector routing setup

  • How should Office 365 connect to your partner organization's email server
    • Always use TLS
    • Issued by a trusted certificate authority (CA)

How should office 365 connect to your partner organizations email server?

  • Validate Connector
    • Connector may need to be validated

 

Transport Rule

  • Navigate to the Mail Flow Section
  • Navigate to the Rules Tab

Office 365 admin center mail flow section

Add New Rule - Authentication

  • Enter Rule Details
    • Name
      • Virtru Inbound Decrypt - Authentication
    • Conditions
      • The Sender is located: Outside the organization
        •  
          • Omit this line if you want to decrypt internally as well
      • The Recipient is located: Inside the organization
      • Body Contains: --- START PROTECTED MESSAGE TDF
    • Actions
      • Add Header
        • Name: X-Virtru-Auth
        • Value:Virtru Provided
    • Exceptions
      • If Header Exists
        • Name: X-Virtru-Decrypt
        • Value: 1

Diagram

new rule conditions set up diagram

 

Add New Rule - Routing

  • Enter Rule Details
    • Name
      • Virtru Inbound Decrypt - Routing
    • Conditions
      • The Sender is located: Outside the organization
        •  
          • Omit this line if you want to decrypt internally as well
      • The Recipient is located: Inside the organization
      • Body Contains:--- START PROTECTED MESSAGE TDF
    • Actions
      • Add Header
        • Name: X-Virtru-Decrypt
        • Value: 1
      • Use the following connector
        • Virtru Inbound Decrypt Gateway
    • Exceptions
      • If Header Exists
        • Name: X-Virtru-Decrypt
        • Value: 1

Diagram

new rule routing set up diagram

 

Related articles