Integration through an edge gateway (SMTP verification of recipient email addresses is enabled) with the help of a wizard

Integration through an edge gateway on which SMTP verification of recipient email addresses is enabled is a type of integration where Kaspersky Secure Mail Gateway receives messages from an intermediate gateway and relays them to internal mail servers, and also receives messages from internal mail servers and relays them to the edge gateway. In this case, SMTP verification of recipient email addresses is enabled on the edge gateway.

SMTP verification of recipient email addresses is used by mail systems to prevent reception of messages for nonexistent addresses.

To configure integration of Kaspersky Secure Mail Gateway into the corporate mail infrastructure through an edge gateway on which SMTP verification of recipient email addresses is enabled:

1. In the main window of the application web interface, open the management console tree and select the Quick MTA Setup section.
2. In the Integrating Kaspersky Secure Mail Gateway into mail infrastructure section, select Integrate through Edge Gateway.
3. Click the Start integration link to go to the SMTP Recipient Address Verification on the Edge Gateway section.
4. Select SMTP Recipient Address Verification is enabled on the Edge Gateway.
5. Click the Go to Adding local domains link to begin performing the steps of the wizard.

Step 1. Adding local domains (relay_domains)

At this step, add local domains of your organization for which Kaspersky Secure Mail Gateway will be receiving email messages from the outside. Kaspersky Secure Mail Gateway will receive messages only for the domains you specified. Messages intended for other domains are rejected.

If local domains are not specified, Kaspersky Secure Mail Gateway will not be receiving messages for your internal mail servers.

To add local domains of your organization:

1. Click the Add a domain link to open the Adding a domain window.
2. In the Enter domain name field, type the name of the domain for which Kaspersky Secure Mail Gateway will be receiving messages.

   Type the domain names in FQDN format.

3. Click the OK button.
4. The Adding a domain window closes.

The domain names have to be entered one at a time. Repeat the process of adding domain names to the list for all domain names that you are adding.

Click the Save and go to Configuration of email routing link to proceed to the next step of the wizard.

Step 2. Configuring email routing (transport_map)

Configure email routing at this step.

By default, Kaspersky Secure Mail Gateway uses the settings of your DNS server for email routing. You can manually configure email routing. To do so, you must create a transport map. In the transport map, enter the names of the domains for which the email messages are intended and then enter the IP addresses or fully qualified domain names (FQDN) to which Kaspersky Secure Mail Gateway will be redirecting messages intended for these domains.

To configure email routing:

1. Click the Add a record to the transport map link to open the Email routing window.
2. In the Enter domain name field, type the name of the domain for which email messages are intended.

   Type the domain names in FQDN format.

3. In the Enter email destination address (IPv4, domain name or FQDN) field, enter the IP address or the domain name of the server to which you want to configure routing of email.

   You can enter an IPv4 address (for example, 192.0.0.1 or 192.0.0.0/16), domain name or FQDN.

4. In the Enter the port number to connect with the email destination address field, select the port number.

   The default value is 25.

5. Select one of the following options:
   • Do not enable MX lookup.
   • Enable MX lookup (for domain names or FQDNs).
6. Click the OK button.

   The Email routing window closes.

Transport map records are added one at a time. Repeat the process of adding records to the transport map for all records that you are adding.

Click the Save and go to Entering the Edge Gateway address link to proceed to the next step of the wizard.

Step 3. Entering address of your Edge Gateway (relayhost)

At this step, enter the address of your edge gateway. Kaspersky Secure Mail Gateway will be redirecting all messages to this address.

For example: 192.0.2.1 or domain.com.

If you have configured email routing for individual domains, Kaspersky Secure Mail Gateway will be redirecting email messages to the addresses specified for each domain.

To enter the address of an edge gateway:

1. In the entry field, specify the IP address or the domain name of the edge gateway.

   You can enter an IPv4 address (for example, 192.0.0.1 or 192.0.0.0/16), domain name or FQDN.

2. Select one of the following options:
   • Do not enable MX lookup.
   • Enable MX lookup (for domain names or FQDNs).

Click the Save and go to Adding trusted networks and network hosts link to proceed to the next step of the wizard.

Step 4. Adding trusted networks and network hosts (mynetworks)

At this step, create a list of trusted networks and network hosts that are allowed to send email messages via Kaspersky Secure Mail Gateway.

As a rule, these are internal networks and network hosts of your organization.

For example, you can specify the IP addresses of Microsoft Exchange servers used at your organization.

If trusted networks are not specified, Kaspersky Secure Mail Gateway will not be receiving messages from internal mail servers and redirect them outside the network of your organization.

To add a list of trusted networks and network hosts:

1. Click the Add a trusted network or network host link to open the Adding a trusted network window.
2. In the Enter network address or network host address field, type the name of the domain for which email messages are intended.

   Type the domain names in FQDN format.

3. Click the OK button.
4. The Adding a trusted network window closes.

Addresses are added one at a time. Repeat the process of adding addresses to the list for all addresses that you are adding.

Click the Save and go to Completing the integration link to proceed to the next step of the wizard.

Step 5. Completing the integration of Kaspersky Secure Mail Gateway through an edge gateway (SMTP verification of recipient email addresses is enabled)

At this step, check the settings you have specified for integrating Kaspersky Secure Mail Gateway into the corporate mail infrastructure and confirm your choice.

When integration into the corporate mail infrastructure is completed, the following settings of Kaspersky Secure Mail Gateway are configured automatically:

• SPF authentication of message senders is disabled.

  Do not enable SPF authentication of message recipients because the message sender is the edge gateway from which Kaspersky Secure Mail Gateway receives messages.

• DMARC authentication of domains from which Kaspersky Secure Mail Gateway receives messages is disabled.

  Do not enable DMARC authentication of domains because Kaspersky Secure Mail Gateway receives messages from an intermediate gateway.

• SMTP verification of recipient email addresses is enabled.

  Do not disable SMTP verification of recipient email addresses because SMTP verification of recipient email addresses is enabled on the edge gateway.

After you complete all steps of the Quick MTA Setup, Kaspersky Secure Mail Gateway resets all values of MTA setting and replaces them with values that you specified in the Quick MTA Setup Wizard.