Configure the appliance in the Forcepoint Security Manager

Some initial configuration settings are important for Forcepoint DLP Email Gateway operation. Perform the following activities after you install Forcepoint DLP Email Gateway management components.

Log on to the Forcepoint Security Manager and select the tab Email.

The Email module displays.

At the prompt, enter your subscription key and click OK.

If you skip this step, you can enter your subscription key later on the page Settings > General > Subscription.

The DLP Module can be registered at any point, but it is recommended to do this before any other configuration is completed.

Configure the system to send email through Office 365 to Forcepoint DLP Email Gateway.

Navigate to Settings > Inbound/Outbound > Mail Routing.

Select the default route.

From Delivery Method, select SMTP server IP address.

Under SMTP Server List, click Add.

For Server Address, add the FQDN of your organization's Microsoft Office 365 account. This is the same as the MX record of the Office 365-hosted domain. To find it:

In the Office 365 Admin Center, select Settings > Domains.

Select the domain name you configured for your organization.

Under Exchange Online, you will see a row for MX. The MX record is listed in that row.

For Port, enter 25.

Enter a Preference.

Click OK.

Under Delivery Options, select Use Transport Layer Security (TLS).

Click OK.

Repeat this step for each Forcepoint DLP Email Gateway VM you have.

Specify an email address to which system notification messages should be sent. This is typically an administrator address. See Setting system notification email addresses.

In the Email module, data loss prevention policies are enabled by default. To manage DLP policies, navigate to Main > Policy Management > DLP Policies > Manage Policies.

In the Data module, you can view all of the VMs in the System Modules list. Select the Data tab and click Deploy.

Click Help on any Forcepoint Security Manager page for help about the page. See Forcepoint DLP Administrator Help for complete information about the DLP Module.

Forcepoint Security Manager steps

These steps are necessary if you have existing DLP policies.

From the Forcepoint Security Manager, select the tab Data.

Add the network email destination to any existing policies that should be used for this appliance.

Click Deploy. No other configuration steps are required.

The Forcepoint DLP Email Gateway module is shown on the System Modules page, as well as System Health and System Logs.

Use the System Modules page to edit the display name or description for the appliance. If desired, you can balance the load on the gateway by selecting System Modules > Load Balancing and then editing the Forcepoint DLP Email Gateway module.

Refer to Forcepoint DLP Administrator Help for more information.