Connection Filter Templates
Pre-configured connection filter templates for common email security scenarios. Templates provide recommended IP allow and block list configurations based on your email infrastructure and third-party service providers.
Note: Templates are starting points. Review and customize IP entries based on your specific mail flow configuration before applying.
Available Templates
| Template | Description | Use Case |
|---|---|---|
| Third-Party Gateway | IP ranges for common email gateways | Proofpoint, Mimecast, Barracuda |
| Marketing Platforms | IP ranges for email marketing services | Mailchimp, SendGrid, Constant Contact |
| CRM Systems | IP ranges for CRM email delivery | Salesforce, HubSpot, Dynamics |
| Monitoring Services | IP ranges for monitoring alert systems | Datadog, PagerDuty, Nagios |
Third-Party Gateway Template
Configure connection filtering when using a third-party email security gateway:
Enhanced Filtering Setup
- Add gateway IPs to skip list — EOP evaluates original sender IP, not gateway IP
- Enable enhanced filtering — Preserves authentication results through the gateway
- Configure inbound connector — Route mail from gateway to EOP
Common Gateway IP Ranges
Contact your gateway provider for current IP ranges. IP ranges change periodically and must be kept updated.
Applying a Template
- Select template — Choose the template matching your scenario.
- Review entries — Verify IP addresses and ranges are correct for your configuration.
- Customize — Add or remove entries based on your specific needs.
- Apply — Save the connection filter policy with the template entries.
- Test — Verify mail flow is working correctly after applying changes.
Custom Templates
Create and save custom templates for reuse across tenants:
- Save current connection filter configuration as a template
- Export templates for use across multiple tenants (MSP scenarios)
- Import templates from other tenants or shared configurations
Best Practices
- Verify IP ranges — Confirm IP ranges with the service provider before adding to allow list.
- Keep templates updated — Service provider IP ranges change. Review quarterly.
- Test in stages — Apply templates to a subset of users first to verify mail flow.
- Document changes — Record which template was applied and any customizations made.
API Reference
GET /api/exchange/connection-filter-templates
List available templates
POST /api/exchange/connection-filter-templates
Create custom template
POST /api/exchange/connection-filter-templates/:id/apply
Apply template to connection filter policy
GET /api/exchange/connection-filter-templates/:id/preview
Preview template changes before applying