Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Hosted Email From ISP

Can you use ASG Mail Security if you do not have an internal mail server? Our mail is hosted from our ISP and all mail clients are setup to use POP3.


This thread was automatically locked due to age.
  • Yes, you can use the POP3 Proxy to filter incoming email.  If you need to scan outgoing email, the SMTP Proxy can also be enabled in transparent mode.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • Hi, kjoones, and welcome to the User BB!

    The other solution, if your ISP is not doing any filtering/AV, would be to use the SMTP Proxy by changing your MX record to have mail sent to your Astaro.  You then need to set the SMTP Proxy to send received emails to your ISP and have your ISP enter the Astaro as a smart host.  It really depends on what size ASG you have and which subscriptions you're using.  Your reseller should have some input for you.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hi, kjoones, and welcome to the User BB!

    The other solution, if your ISP is not doing any filtering/AV, would be to use the SMTP Proxy by changing your MX record to have mail sent to your Astaro.  You then need to set the SMTP Proxy to send received emails to your ISP and have your ISP enter the Astaro as a smart host.  It really depends on what size ASG you have and which subscriptions you're using.  Your reseller should have some input for you.

    Cheers - Bob



    Bruce,  would you kindly elaborate a bit on the details of this last option?  It seems a bit circuitous.

    Also, would such a configuration allow email tagged to a particular domain but outside of the gateway perimeter (e.g. not the internal networks) to first be scanned by the gateway before sending or delivering?

    Thanks!
  • Wingman's thread, https://community.sophos.com/products/unified-threat-management/astaroorg/f/56/t/49267, includes the details of doing what I described.  The SMTP Proxy has a lot more features than the POP3 Proxy, and it puts less burden on the end users during the configuration phase.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?