This article contains information on Mimecast's Email Security Setup Wizard, detailing its streamlined onboarding process, key steps for account, inbound, and outbound mail setup, FAQs on configuration, and guidance for MSP partners to ensure a smooth implementation experience.
This article is relevant to the Jersey region only.
Overview
Mimecast’s Email Security Setup Wizard experience gets your customers up and running with Mimecast quicker. We want to make it easy for all customers to work with Mimecast by providing streamlined, intuitive processes and simplified systems.
Our easy-to-setup experience allows customers to access the Mimecast Administration Console sooner to familiarize themselves with the tools they use daily or week-to-week. This new process will focus on getting customers' mail flow through Mimecast by streamlining our conventional processes, removing the need for any Request for Information (RFI) requests.
Email Security Setup Wizard has been built focusing on three key steps to get a customer’s mail flowing through Mimecast:
- Account Setup
- Inbound Mail Setup
- Outbound Mail Setup
Our new wizard application has been built to seamlessly guide customers through these steps. Please read the FAQs below to familiarize yourself with this new customer experience.
Frequently Asked Questions
| Q: | What is the Email Security Setup Wizard? |
| A: | Email Security Setup Wizard (ESSW) offers partners and customers a streamlined, self-service onboarding experience enabling end-users to get up and running quicker. |
| Q: | How do I gain access to the Email Security Setup Wizard? |
| A: | The implementation lead receives an email from Mimecast. This email will include the link to the Email Security Setup Wizard and temporary credentials, including username, password, and information they should know before getting started. |
| Q: | How long will the Email Security Setup Wizard be available for onboarding customers? |
| A: | 90 Days |
| Q: | Can I leave the app during the process? |
| A: |
Yes! If any tasks are incomplete, administrators can return to their or their customer’s Email Security Setup Wizard, setup by clicking the URL link in the initial implementation email or SSO from the Mimecast Administration Console via App Switcher. MSP customers can log in to their customer’s Mimecast Administration Console by clicking the “Admin Console” button in the Partner Portal. Once in the Mimecast Administration, navigate to the App Switcher from your customer’s account and select the Email Security Setup Wizard. This option is only available to MSP administrators who have added themselves as an External Partner Administrator to the customer’s account. |
| Q: | Who do I contact in case urgent help is needed? |
| A: |
Administrators can do any of the following methods
Customers choosing to call must ensure they enter their Connect Support Case Number while in the phone network so we can direct their call to an Implementation Engineer. |
| Q: | What should MSPs and Customers do to prepare? |
| A: | The initial implementation email contains a hyperlinked checklist to an article; this details what the customer should review and what information to gather for the smoothest experience. |
| Q: | Why do I need to update my Emergency Contact? |
| A: |
We need Emergency Contact information to be stored on the platform. If or when a Mimecast or account-specific event requires attention (e.g., SPAM outbreak, Message Loops, etc.), Mimecast will attempt to contact the Emergency Contact used here. If Mimecast receives no response from the Emergency Contact, then Mimecast will call the number supplied. This can delay the contact process.
The emergency contact information should be kept up to date and can be updated under the Account Settings section of the Mimecast Administration Console. MSP Admins - This involves listing your individual/team/group. |
| Q: | What is a Microsoft 365 Tenant Domain? |
| A: |
Microsoft 365 tenant domain is the services assigned to the customer’s organization. Typically, this domain is associated with one or more public DNS domain names and acts as a central and isolated container for different subscriptions and the licenses within them that are assigned to the user’s accounts. A tenant domain ends with “.onmicrosoft.com” You must validate the ".onmicrosoft.com" domain and NOT the "mail.onmicrosoft.com" domain. Microsoft uses this last domain as a relay domain. When migrating from an On-Premises Exchange to Microsoft 365. Microsoft has set the default ".onmicrosoft.com" domain when provisioning your Microsoft 365 tenant. |
| Q: | Why does Mimecast need Tenant Domain information? |
| A: | To ensure the Mimecast Message Transfer Agent (MTA) accepts the outbound communication, it must confirm it originates from the associated Microsoft tenant. |
| Q: | How can I validate Tenant Domain using Email Security Setup Wizard? |
| A: | Please see the Mimecast knowledge article Validate Microsoft 365 Tenant Domain for further information. |
| Q: | Who validates Microsoft 365 tenant domains? |
| A: | All Mimecast customers who use Microsoft 365 infrastructure must validate their tenant domain. |
| Q: | How many domains can the user verify? |
| A: | The Email Security Setup Wizard allows customers to add multiple domains. Once a domain has been added, click Add Additional Domain to continue adding more domains. |
| Q: | What does Delivery Routing do? |
| A: | Delivery Routing creates the mail delivery route for all validated domains. |
| Q: | What is Directory Integration? |
| A: | Directory Integration allows your customers to securely automate the management of Mimecast users and groups using your company directory, whether hosted on-premises or in the cloud. Integrating your customer company's directory with Mimecast has several benefits, ranging from feature enablement to reducing the administrative overhead of configuring and maintaining Mimecast features. |
| Q: | How to configure Directory Integration using the Setup Wizard? |
| A: | Click the Configure Directory Integration button. A dialog box will appear informing administrators that they will leave the Email Security Setup Wizard to complete Directory Integration in the administration console. Click Go to Directory Integration. A separate browser tab will open, allowing administrators to configure the directory integration within the Mimecast Administration Console. |
| Q: | What changes to expect with Directory Integration? |
| A: | Directory integration during onboarding will offer enhanced protection by updating the Recipient Validation check on your customer’s domain to “Known Recipient Only.” |
| Q: | How do I create additional Directory Integrations? |
| A: | After the Wizard Setup, the Mimecast Administration Console can be used to configure additional Directory Integration. See Directory Synchronization - Overview. |
| Q: | What is Anti-Spoofing, and how do users prepare to configure it? |
| A: | Mimecast Anti-Spoofing policies will block external sources using the user's validated domain name(s). For full details, see our knowledge article on Configuring Anti-Spoofing. |
| Q: | Can I skip Anti-Spoofing? |
| A: | Mimecast recommends users configure Anti-Spoofing; however, it’s optional during the initial setup. Anti-Spoofing is also available for configuration at your convenience in the Policies section of the Administration Console. |
| Q: | What is an MX record, and how do I verify it? |
| A: |
Once the user updates the MX record for all domains the user validated, the inbound mail will flow through Mimecast to be subject to Mimecast’s default policies. A Mail Exchanger record (MX record) specifies which mail server accepts emails for a particular domain name. For further details, refer to the MX Records section of Configuring Inbound Mail. |
| Q: | The user selected Microsoft 365 for Mail Routing. What happens next? |
| A: |
The successor screen will confirm that the user has selected Microsoft 365 as the host of the domain validated. Routing the user’s outbound messages through the Mimecast gateway requires an update to the user’s mail server for outbound mail. Use the region and hostnames shown on the outbound routing screen. Once completed, users can test the outbound mail routing by emailing. |
| Q: | What is Journaling? |
| A: | Journaling enables Mimecast to secure and/or archive your customer’s internal email communication. Learn more about Journaling. |
| Q: | How to Configure Journaling Using the Email Security Setup Wizard? |
| A: | To configure a Journaling Connector on your customer’s Mimecast account, select the main domain from the domain drop-down (in case of multiple domains) and click Create Address to generate a Service address and Journaling Smart Host. Then create a Send / Mail flow Connector that passes Journal messages to the smart hosts displayed in the Setup Wizard. Lastly, Administrators enable the Journal feature on the email infrastructure. When this has been configured on the infrastructure and journal items are presented to the Journal Connector on the Mimecast Administration Console, Click Verify journaling. A green check mark will display if the Journal Connector has detected messages. If the green check mark does not appear, please review the configuration, and try again. |
| Q: | What errors could happen during the Journaling step? |
| A: |
Verify Journaling could show an error if Configuration is incomplete or Journal Connector has not detected any messages within the configured domain. |
| Q: | How do users know when the setup is complete? |
| A: |
When users complete the setup, a Summary page will display. Admins can see the completed information for Account, Inbound, and Outbound settings for the user-validated domains. Once reviewed, please click Finish to navigate to the Mimecast Administration Console. Please log in to Administration Console to further amend the customer’s account, Inbound, and Outbound configuration. |
| Q: | What happens when the user finishes the setup? How do they continue? |
| A: |
Once the email security has been completed, users will leave the onboarding and enter the Mimecast Administration Console. The user can make any updates or revisit skipped tasks
Additional task guides, including but not limited to:
|
| Q: | MSP Partners: Do I need to fill the RFI form with Email Security Setup Wizard? |
| A: | No, Email Security Setup Wizard users do not need to fill RFI form, as the information is now part of the Account section within the wizard. |
| Q: | MSP Partners: Why is the External Partner Admin field mandatory when using Email Security Setup Wizard during the order creation? |
| A: | The External Partner Admin field allows MSP administrators to utilize single sign-on via the Mimecast Partner Portal for their tenant’s account in Mimecast Administration Console. |
| Q: | MSP Partners: Can MSP admin login to Mimecast Administration Console with the temporary credentials provided in the email? |
| A: | Yes. However, we recommend using SSO by logging into the Mimecast Partner Portal as an external Partner Administrator on the tenant’s account. The temporary credentials are only available for the first 90 days and will be removed shortly after. |
Comments
Please sign in to leave a comment.