Security Compliance

Configure SEM to send email via Office 365

This article will give you the specific settings needed to configure your Email Active Response connector to use Office 365 as a mail host. There are two different configuration methods available.

First published date

10/19/2018 11:27 PM

Last published date

9/13/2021 4:45 PM

Overview

This article applies to Security Event Manager (formerly Log & Event Manager).
This article will give you the specific settings needed to configure your Email Active Response connector to use Office 365 as a mail host. There are two different configuration methods available.

Product section

Security Event Manager

Resolution

Method One: Direct Send

This method doesn't require authentication or using an existing account as the return address, but is also limited to only sending messages to internal email accounts.

  • Alias: Anything
  • Mail Host: This will be the MX record for your domain and will look like company-corp.mail.protection.outlook.com. The "mail.protection.outlook.com" part is pretty universal.  If you don't know your MX record, you can find it using these steps:
    1. Sign into the Office 365 portal
    2. Go to the Admin Console
    3. Go to Manage Domains
    4. Select your domain (usually the first entry)
    5. Click the Settings link for that domain
    6. The MX record will be listed on that page
  • Port: 25 (required)
  • Transport Protocol: TLS (required)
  • Return Address: Anything
  • Return Display Name: Anything
  • Authentication Server Username: Leave blank
  • Authentication Server Password: Leave Blank
  • Test E-mail Address: Any address on the Office 365 mail service

Method Two: SMTP Client

This method requires a valid account to send messages from and does require a valid username and password, but you will be able to send email messages to any internal or external address. In addition, the account used for authentication must have Send As permissions to the mailbox used for the Return Address.

  • Alias: Anything
  • Mail Host: smtp.office365.com
  • Port: 587 (required)
  • Transport Protocol: TLS (required)
  • Transport Protocol: TLS (required)
  • Return Address: Must be a valid customer Office 365 mailbox
  • Return Display Name: Must match the mailbox being used
  • Authentication Server Username: Office 365 username (usually user@domain.com)
  • Authentication Server Password: Office 365 password for the above user
  • Test E-mail Address: Any e-mail address