Onboarding - Email Security Onboarding Checklist

This article provides a comprehensive onboarding checklist for Mimecast's Email Security Setup Wizard. It covers essential tasks such as domain validation, allowing you to choose between Deployment options within Mimecast Gateway and Mimecast Integrated, DNS changes, anti-spoofing measures, MX/SPF record updates, outbound IPs, email environment credentials, and relay/forwarding email configurations to facilitate a seamless onboarding experience.

Use this checklist to gather all necessary information for your onboarding process:

Email Hosting Provider Information

  • Collect all relevant details about your email hosting provider, as this information will be required during setup.

Domains

  • Document all the domains your company uses and intends to validate with Mimecast.

  • All domains can be validated during the onboarding process.

Anti-spoofing

  • Identify any legitimate services that spoof your email domains. If applicable, you will need the IP addresses from which these emails are sent.

DNS Changes

  • DNS Record Control

    • Before initiating the onboarding process, ensure you have the capability to modify DNS records. This may involve having access to a DNS control panel at your domain registrar or hosting provider. If you manage your own DNS servers, confirm that you possess the necessary permissions.

TTL

  • When transitioning to a new email solution provider, it is crucial to verify and adjust the DNS TTL on the records that will change in advance. Simultaneously adjusting your TTL and DNS record may lead to delays beyond the TTL.

  • Maintaining the shortest possible TTL interval ensures a smooth transition or fallback in case of issues.

  • A TTL of 600 seconds is recommended.

MX Record for Cloud Gateway Setup

  • Your MX record must be updated to designate Mimecast as the server responsible for receiving email for your domain.

  • Before starting the onboarding process, verify that you can update the MX records for your domain independently.

SPF Record for Cloud Gateway Setup

  • Your SPF record needs to be updated to indicate Mimecast as the email server authorized to send emails on behalf of your domain.

  • Before beginning the onboarding process, confirm that you can update the SPF and/or TXT records for your domain on your own.

Outbound IP for Cloud Gateway Setup

  • Document any IP addresses your company uses to send outbound emails.

  • Email Environment Credentials

    • Have your Microsoft 365 / Google Workspace credentials ready or ensure you have the appropriate permissions to make infrastructure changes.

Relay/Forwarding Emails for Cloud Gateway Setup

  • If you permit the relay of emails to external domains, please record all email addresses to which messages are sent.

  • If you maintain any distribution lists that include external members and accept messages from external senders, please document the email addresses of those external members.

Was this article helpful?
1 out of 2 found this helpful

Comments

0 comments

Please sign in to leave a comment.