Email Exception source networks

I also experinced a lot of issues with incoming O365 mail, my solution is:

Go to System > Hosts and Services > FQDN
Add a FQDN Host > *.protection.outlook.com (or whatever suits your needs)

Then go to Protect > Email > Policies & Exceptions
Add an exception f.i. "protection.outlook.com"
Tick the box in front of 'Greylisting'
Add the earlier added FQDN to ' For these sources/hosts' area
Save.

The FQDN does however need some time tot learn and after every restart of the XG system everything is reset.

Thanks for the suggestion.

But that is not all we need. The main problem is that after all these years such simple functions are still missing in XG/XGS.

Greylisting is a feature of the past. I would recommend to disable greylisting for certain reasons. The advantages are not there compared to the modern world.

That is the reason, Sophos Email in Central is not doing Greylisting in the first place. Using RBLs and other techniques are better going forward compared to greylisting. 

That's ok for greylisting. But I primarily meant the missing function (thread title). What if I have to do exceptions for RBL, Antivirus, Zeroday?

Routing Mail through Central is not really an option for us.

You can do this with an exception under "Email" -> " first tab "Policies & exceptions" -> "Add exception" (button on the right site)

I know, but I can't add a NETWORK at "source/hosts". Only single hosts.

Just wondering, why is Central not an option? Any technical reason for this? 

In our oppinion security and infrastructure devices can't be managed by cloud services. That's preventive thinking. Services we don't use can't break our business. And that's the same for personal data. Data a provider doesn't have can't get lost.

Maybe "old fashioned" and more work for us to do but a proved concept.