• Cloud App Security
• Understanding Cloud App Security
  • Understanding Email Security
    • Understanding Post-Delivery Email Recheck
  • Using Data Leak Protection
  • Understanding Anomalies
  • Understanding Click-Time Protection
• Configuring Cloud App Security
  • Subscribing to Cloud App Security
  • Activating Cloud Applications for Cloud App Security
  • Activating Office 365 and Microsoft 365 Cloud Applications
    • Manually Configuring Office 365 and Microsoft 365 Cloud Applications During Activation
• Managing Quarantine for Office 365 and Microsoft 365
  • Setting Up a Quarantine Mailbox for Office 365 and Microsoft 365 Email (Exchange Online)
  • Setting Up a Quarantine Folder for Office 365 and Microsoft 365 OneDrive
  • Setting Up a Quarantine Folder for Office 365 and Microsoft 365 SharePoint
  • Using the Quarantine View for Office 365 and Microsoft 365 Email (Exchange Online)
  • Using the Quarantine Page
  • Using the Quarantined File Creator Dashboard
  • Using the User Dashboard for Office 365 and Microsoft 365
  • Managing Restore Requests
• Using the SonicWall Cloud App Security Dashboard
  • Using the Security Events Widgets
    • Changing a Security Event Widget to an Alert or Custom Query
    • Resetting a Security Event Widget
    • Hiding a Security Event Widget
    • Configuring Security Event Widget Custom Queries
    • Adjusting the Time Scale
  • Viewing the Summary of Security Events
  • Viewing Login Events
  • Viewing Secured Applications
  • Viewing the Scanned Files Summary
• Managing Security Events
  • Using the Security Event Graphs
    • Viewing Security Events by Severity
    • Viewing Security Events by State
    • Viewing Security Events by Cloud Application
  • Viewing and Acting on Security Events
    • Removing Filters
    • Acting on Security Events
  • Managing Multiple Events
• Managing Policies
  • Understanding Cloud App Security Policies
    • Before You Set Email Policies
    • Monitor only
    • Detect and Prevent
    • Protect (Inline)
  • Creating New Policy Rules
    • Creating Data Leak Protection Policy Rules
      • Using Regular Expressions in DLP Policies for Email
    • Creating Malware Policy Rules
    • Creating Threat Detection Policy Rules
    • Creating Policy Rules for Click-Time Protection
    • Creating Office 365 and Microsoft 365 Email Encryption Policy Rules
    • Creating Custom Query Policies
  • Stopping Policy Rules
  • Removing Policy Rules
  • Managing Office 365 and Microsoft 365 (Exchange Online) Mail-Flow Rules
• • Configuring Data Leak Protection Detection Rules
  • Reactivating Data Leak Protection
  • Predefined Data Leak Protection Policy Rules
    • Global Rules
    • Credentials and Secrets
    • Predefined Data Leak Protection Rules for Specific Countries
      • Argentina
      • Australia
      • Belgium
      • Brazil
      • Canada
      • Chile
      • China
      • Columbia
      • Denmark
      • Finland
      • France
      • Germany
      • Hong Kong
      • India
      • Indonesia
      • Ireland
      • Israel
      • Italy
      • Japan
      • Korea
      • Mexico
      • The Netherlands
      • Norway
      • Paraguay
      • Peru
      • Poland
      • Portugal
      • Singapore
      • Spain
      • Sweden
      • Taiwan
      • Thailand
      • Turkey
      • United Kingdom
      • United States
      • Uruguay
      • Venezuela
• Managing Spam and Anti-Phishing
  • Managing Spam
  • Managing User-Reported Phishing
  • Customizing Warning Messages
  • Managing Nickname Impersonation
  • Managing the Anti-Phishing Exceptions
    • Managing Excluded Email Addresses
      • Adding Email Addresses to the Anti-Phishing Block-List
      • Removing Email Addresses from the Anti-Phishing Block-List
    • Managing Excluded IP Addresses
      • Adding IP Addresses to the Anti-Phishing Block-List
      • Removing IP Addresses from the Anti-Phishing Block-List
    • Managing Excluded Domains
      • Adding Domains to the Anti-Phishing Block-List
      • Removing Domains from the Anti-Phishing Block-List
    • Creating Block-List Rules from Email Messages
    • Managing the Anti-Phishing Allow-List
      • Creating Anti-Phishing Allow-List Rules from the Security Events Page
      • Creating Anti-Phishing Allow-List Rules from the Anti-Phishing Allow-List Page
    • Managing the Anti-Phishing Block-List
• Using the Mail Explorer
  • Using the Mail Explorer to Search Emails
  • Using the Mail Explorer to Quarantine Items
  • Using the Mail Explorer to Add Items to the Blocked List
• Working with Office 365 and Microsoft 365 Email Encryption
• Configuring and Using Click-Time Protection
  • Activating Click-Time Protection
  • Configuring Click-Time Protection
    • Configuring the Click-Time Protection Workflow
    • Configuring Custom Click-Time Protection for Specific Domains
      • Adding Custom Click-Time Protection for Specific Domains
      • Deleting Custom Click-Time Protection for Specific Domains
  • Using Click-Time Protection
    • Viewing Security Events for Click-Time Protection
    • Managing Email Messages with Click-Time Protection
    • Creating Custom Queries for Click-Time Protection
• Using Cloud App Security Analytics
  • Viewing the Summary Report
  • Viewing the Weekly Reports
  • Viewing Email Analytics
  • Viewing Office 365 and Microsoft 365 OneDrive Analytics
  • Viewing Office 365 and Microsoft 365 SharePoint Analytics
  • Viewing Shadow SaaS Analytics
  • Viewing and Creating Custom Queries
    • Creating Custom Queries
    • Adding Custom Queries to the Dashboard
• Configuring Cloud Applications in the Cloud App Store
  • Configuring Office 365 and Microsoft 365 for Cloud App Security
  • Re-Authorizing Cloud Applications
• Managing Security Applications in the Security App Store
  • Starting Security Applications
  • Stopping Security Applications
• Managing Anomaly Exceptions
  • Creating Exceptions Based on Anomaly Events
  • Sending Anomaly Event Notifications
• Managing Security Tool Exceptions
• Using the System Log
  • Viewing the System Log
  • Exporting the System Log
• Managing Cloud App Security Licenses
  • Adding Administrator Users
  • Adding Read-Only Users
  • Managing Group Licensing
  • Unassigning Cloud App Security Licenses
• SonicWall Support
  • About This Document

Manually Configuring Office 365 and Microsoft 365 Cloud Applications During Activation

Cloud App Security can secure cloud applications with these subscription types:

• Business
• Microsoft 365 Apps
• Education

Office 365 and Microsoft 365 Personal and Home subscription plans are not supported by SonicWallCloud App Security.

To manually configure Office 365 cloud applications during activation

1. Select the installation mode you want to use to activate the Office 365 and Microsoft 365 cloud application.

   

2. To manually activate the Office 365 and Microsoft 365 cloud application, select Manual Mode and click Ok. (For information on how to automatically activate the Office 365 and Microsoft 365 cloud application, see Activating Office 365 and Microsoft 365 Cloud Applications.

3. Click Continue to authorize any supporting applications.

   

4. Select your Office 365 and Microsoft 365 account from the list and, if prompted, log in using your Office 365 and Microsoft 365 account username and password.

   

5. Sign into your Office 365 and Microsoft 365 business account.

   

6. Click the in the upper left area of the page.

   

7. When the Apps area appears, select Admin.

   

8. From the Office 365 and Microsoft 365 admin center, click Show all.

   

9. Scroll down to Admin centers and click Exchange.

   

10. On the Exchange admin center page, click compliance management > journal rules.

    

11. In the Send journal reports to field, enter the email address in your domain to which the journal reports should be sent.

    

    The journal rule is used for the monitoring mode. The journal rule configures Office 365 and Microsoft 365 to send all emails to the system.

12. Click Save.

13. On the Exchange admin center page, click mail flow > connectors.

    

14. To configure the inbound connector, select it in the list and either double-click or click the Edit icon.

    

    1. Enter a Name and Description for the inbound connector.

       

    2. Select Turn it on if you want to connector enabled after you complete its configuration.
    3. Click Next.

    4. Select where to the use the domain name or the IP address of the sender.

       

    5. Click Next.

    6. Select the IP addresses you want to use to identify your sender.

       

       You can also add, edit, or delete sender IP addresses on this page.

    7. Click Next.

    8. Select Reject email messages if they aren't sent over TLS to reject any email messages from the sender that are not sent using Transport Layer Security (TLS).

       

       You can add an additional level of security by selecting And require that the subject name on the certificate that the partner uses to authenticate with Office 365 and Microsoft 365 matches this domain name and specifying a required domain name.

    9. Verify your settings for the inbound connector and click Save.

       

15. To configure the outbound connector, select it in the list and either double-click or click the Edit icon.

    

    1. Enter a Name and Description for the outbound connector.

       

    2. Select Turn it on if you want to connector enabled after you complete its configuration.
    3. Click Next.

    4. Set when you want the connector to be used.

       

    5. Set how you want the email messages routed.

       

    6. Select Always use Transport Layer Security (TLS) to secure the connection (recommended) to only connect to the email server of the email recipient is TLS is used to secure the connection. (This option is selected by default.)

       

       You can also increase the security of the connection by requiring the presence of an email server certificate, either self-signed or issued by a recognized certificate authority.

    7. Verify your settings for the outbound connector and click Save.

       

16. Navigate to mail flow > rules.

    1. Select the rule that contains “Protect” and double-click on it or click the Edit icon.

       

    2. Set the values of the fields to use the connectors that you created.

       

       • Apply this rule if…: Set the condition(s) under which the rule should be applied.

         In this example, the rule is only applied to emails that originate outside the organization/domain and the email address of the recipient is within the organization/domain.

       • Do the following…: Specify the action(s) to be taken when the rule is applied.

         In this example, the header of the email message is assigned a specific value so that processed email messages can be more easily detected and then forwarded to the outbound connector that you created.

       • Except if…: Specify any exceptions for when the rule’s actions should not be taken.

         One of your exceptions should include Sender’s IP address is in the range… that includes the IP addresse(s) specified in your inbound connectors to prevent the email messages from being processed in an endless loop.

         In this example, the actions are not taken if the email message has already been classified by Microsoft as spam (an Spam Confidence Level [SCL] greater than 5) or is a message that is identified as having been processed.

       • Select Stop processing more rules to end the processing if the email message was processed by this rule.

       Every time you change the scope of the inline policy (such as when you add or remove users or groups), you will need to edit the Apply this rule if… The recipient is … section.

17. Click Save.