This article describes how to configure Email protection provided by Intermedia with your Office 365 account purchased from Intermedia. 

To configure outbound mail flow routing through Intermedia Email protection, follow the steps described below.

Important: make sure to create or adjust the SPF record for your domain to include spf.intermedia.net.
For example, your_domain.com, TXT, "v=spf1 include:spf.protection.outlook.com include:spf.intermedia.net ~all"
This step needs to be completed first to prevent possible problems with mail delivery during creation of a new connector. You may lower TTLs to 1 hour to update the SPF record faster. Only when the SPF record is created, it is safe to enable the outbound send connector.

  1. Log in to your Office 365 portal as Global admin
  2. Navigate to Exchange admin center
  3. Navigate to Mail flow > Connectors and click on a plus sign to add a new connector
    Office 365
  4. Select From as Office 365 and To as Partner organization
    Select
  5. Specify the name of your new connector and leave the option Turn it on
    Specify
  6. Choose the second option for Only when email messages are sent to these domains and specify * (asterisk sign) to include all domains
    Choose
    Choose 2
  7. For routing please choose Route emails through these smart hosts and input outbound.smtp.o365.serverdata.net value
    Route
    Route 2
  8. Choose to always use TLS for secure connections and to make sure that certificate is issued by a trusted certificate authority
    TLS
  9. Review and confirm the settings then proceed with validation of connector setup
    Review
  10. Enter a valid external email address and click Validate
    Validate
  11. Make sure connectivity check is successful and save changes. Failure on ‘Send test email’ is expected and can be ignored, as O365 Create Connector Wizard attempts to send test message from a non-existing address, which is rejected by our filtering.
    Successful

O365 default SPF record include:spf.protection.outlook.com can be deleted after enabling of the send connector, this step is optional.

Note: If you have DKIM already configured with O365, it may disrupt filtering with Intermedia as during outbound filtering an email content may be changed and DKIM Signature may become invalid. Two solutions are possible: