Select the Connections tab on the policy to view or change connections for the policy. Your policy must have at least one default inbound connection and one outbound connection in order to be active on the system.

The Inbound Mail Routing Rules section of the tab specifies rules that route inbound mail from Forcepoint Email Security Cloud to particular email servers depending on the recipients. The rules are applied in the order listed; you can change the order by dragging the priority numbers up and down the list, then clicking Save Order.

To add a new inbound mail routing rule, click Add New Rule, then see Configuring inbound mail routing rules.

You can check which of your mail routing rules, if any, applies to a particular email address by clicking mail routing test utility. See Testing mail routing.

The Default Inbound Routes section defines where the service sends email that is not matched by an inbound routing rule after processing messages received from the Internet - these are the connections to your email servers.

The Outbound box specifies from which connections the service is prepared to accept email for your domains (for onward delivery to the Internet).

Note that the service always attempts to deliver or receive email messages over a TLS connection if the sending or receiving MTA supports it. If opportunistic TLS is not available, the data transfer is made via plain text, rather than encrypted text. In either case, the data transfer is successfully accomplished. If you wish to use mandatory TLS, see Transport Layer Security.