Configuration - Regional IPs & Resources

This article contains information on region-specific IP addresses, URLs, and related details for Mimecast Email Security Cloud Gateway, aimed at administrators managing integrations and SPF configurations.

Global Links

Application	URL
Email Security Cloud Integrated	https://login.mimecast.com
Service Status	https://status.mimecast.com/

Regional Links & Useful Data

Targeted Threat Protection (TTP)

For customer awareness and in case you have integrations parsing messages for Mimecast-rewritten URLs or decoding Mimecast-rewritten URLs. These integrations must know Mimecast's Targeted Threat Protection URL patterns. Relevant integration types include SOAR, XDR, and custom scripts using the Get Message Part or Decode URL API endpoints.

Region	Destination Domain
Australia	url.au.a.mimecastprotect.com
Canada	url.ca.a.mimecastprotect.com
Europe (excluding Germany)	url.uk.a.mimecastprotect.com
Germany	url.de.a.mimecastprotect.com
Offshore	url.jer.a.mimecastprotect.com
South Africa	url.za.a.mimecastprotect.com
United States of America	url.us.a.mimecastprotect.com
United States of America (B-Grid)	url.usb.a.mimecastprotect.com

Outbound Delivery SPF Includes

To ensure a successful implementation of SPF with Mimecast, include a comprehensive list of our outbound IP addresses in your DNS SPF record. This is a long list (24 distinct IP4 ranges at the time of writing), and new ranges may be added without notice. You must administer this via your DNS provider.

To determine your region, refer to the table and also examples below:

Region	Record
Australia	v=spf1 include:spf.au-1.a.mimecastprotect.com
Canada	v=spf1 include:spf.ca-1.a.mimecastprotect.com
Germany	v=spf1 include:spf.de-1.a.mimecastprotect.com
United Kingdom	v=spf1 include:spf.uk-1.a.mimecastprotect.com
United States of America	v=spf1 include:spf.us-1.a.mimecastprotect.com

Hard / Soft Fail Examples

Simple Case	Relaxed configuration for customers who only send external mail for a given domain via Mimecast.	"v=spf1 include:spf.us-1.a.mimecastprotect.com ~all"
Strict Case	We strongly recommend testing with the relaxed syntax for customers wishing to implement a strict SPF reject for unmatched requests.	"v=spf1 include:spf.us-1.a.mimecastprotect.com –all"