-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
Firewall settings for Hosted Email Security to work with On-prem solutions
05/24/2023 
58 People found this article helpful
486,989 Views
Description
In order for Hosted Email Security (HES) to work with On-prem solutions the Firewall will need the Nat Policies and Access Rules described below.
Resolution
Create the following in order of their appearance
Service Groups
1. LDAP and LDAPS 389 and 636
Address Objects
Create address object for the following Networks
1. Hosted IP a 173.240.210.0/255.255.255.0
2. Hosted IP b 173.240.213.0/255.255.255.0
3. Hosted IP c 204.212.170.0/255.255.255.0
Here is sample.
The Above mentioned IPs for HES North America. If your are HES Europe tenant. There is only one range you must use
1.Hosted IP 173.240.221.0/255.255.255.0
Public IP SMTP (Public IP SMTP)
Private IP SMTP (Private IP of the SMTP server)
Public IP LDAP (Public IP LDAP)
Private IP LDAP (Private IP of the LDAP server)
Address Groups
Create an Address Group with the following IP Networks for North America.
1. Hosted IPs Hosted IP a, Hosted IP b, Hosted IP c Hosted IP d
Nat Policies
for SMTP traffic:
1. Any Original Public IP Private IP SMTP Original
for LDAP traffic:
2. Any Original Public IP Private IP LDAP+S Original
Access rules
1. Wan Lan Hosted IPs Public IP LDAP+S Allow
2. Wan Lan Any Public IP LDAP+S Deny
3. Wan Lan Hosted IPs Public IP SMTP Allow
4. Wan Lan Any Public IP SMTP Deny
NOTE:If you have other devices that need to access your LDAP from WAN to LAN outside of the hosted devices you will need to make sure those allow rules are prior to the deny all for LDAP
Related Articles
- How to Block Google QUIC Protocol on SonicOSX 7.0?
- How to block certain Keywords on SonicOSX 7.0?
- How internal Interfaces can obtain Global IPv6 Addresses using DHCPv6 Prefix Delegation
Categories
- Firewalls > TZ Series > Networking
- Firewalls > SonicWall NSA Series > Networking
- Firewalls > SonicWall SuperMassive 9000 Series > Networking
- Email Security > Hosted Email Security > Network Architecture
YES
NO