SophosXG v19 ((home) - redirect Mail requests to an external (open source) secure mail gateway

If you have XG configured in MTA mode try Email > General settings > Smarthost settings

This will send outgoing mail to an external relay server.

He was asking for incoming mail, too.

You have to define an "SMTP-Policy" und "Email/Policies&Exceptions" where you set up a "Domain and routing target" with a static route to your (external) mailserver.

jprusch thanks for your response. you are right, the "pre-scan" of mails and links / attatchments should be also given in the inbound traffic. any idea from your site, perhapse a product, that can be used outsite the LAN/DMZ intrastructure that scan the registered mailboxes of an public provider and move junk mails directly to the junk forder in an recommended cycle ? 

thanks and regards
Chris 

jprusch thanks for your response. you are right, the "pre-scan" of mails and links / attatchments should be also given in the inbound traffic. any idea from your site, perhapse a product, that can be used outsite the LAN/DMZ intrastructure that scan the registered mailboxes of an public provider and move junk mails directly to the junk forder in an recommended cycle ? 

thanks and regards
Chris 

I don't get you, or it is a complete misunderstanding of the concept of "Email protection in MTA-mode".

The Sophos XG Email protection IS scanning both incoming and outgoing mails, if configured properly.

That is for incoming mail: set your MX to your public IP of the Sophos XG firewall's external interface ("WAN").

For outgoing mail, your mails are scanned by the "Email protection" module as well, no need for another server.

Have a look here: https://www.sophos.com/de-de/medialibrary/PDFs/documentation/SophosFirewall/Pocket-Guides/ProtectCloudhostedEmailServerMTAMode.ashx