Skip to content

Commit 5baf357

Browse files
Keep copy same as Area 1
1 parent 7d643b3 commit 5baf357

File tree

2 files changed

+3
-7
lines changed

2 files changed

+3
-7
lines changed

src/content/docs/cloudflare-one/email-security/setup/pre-delivery-deployment/prerequisites/gsuite-email-security-mx.mdx

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -68,11 +68,7 @@ If desired, you can create a separate quarantine for each of the dispositions.
6868

6969
## 5. Secure your mail flow
7070

71-
:::note
72-
This step should be performed after 72 hours for DNS propagation.
73-
:::
74-
75-
After 72 hours, the MX record DNS update will have sufficiently propagated across the Internet. It is now safe to secure your email flow. This will ensure that Google only accepts messages that are first received by Email Security. This step is highly recommended to prevent threat actors from using cached MX entries to bypass Email Security by injecting messages directly into Gmail.
71+
After 36 hours, the MX record DNS update will have sufficiently propagated across the Internet. It is now safe to secure your email flow. This will ensure that Google only accepts messages that are first received by Email Security. This step is highly recommended to prevent threat actors from using cached MX entries to bypass Email Security by injecting messages directly into Gmail.
7672

7773
To secure your mail flow:
7874

src/content/docs/cloudflare-one/email-security/setup/pre-delivery-deployment/prerequisites/m365-email-security-mx/index.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -107,12 +107,12 @@ To create the transport rules that will send emails with certain [dispositions](
107107

108108
<Render file="email-security/deployment/set-up-mx-inline-step"/>
109109

110-
## 6. (Recommended) Secure Microsoft 365 from MX records bypass
110+
## 6. Secure Microsoft 365 from MX records bypass (Recommended)
111111

112112
One method of DNS attacks is to search for old MX records and send <GlossaryTooltip term="phishing">phishing</GlossaryTooltip> emails directly to the mail server. To secure the email flow, you will want to enforce an email flow where inbound messages are accepted by Office 365 only when they originate from Email Security. This can be done by adding a connector to only allow email from Email Security with TLS encryption. This step is optional but recommended.
113113

114114
:::caution[Important]
115-
This step should be performed 72 hours after all domains (excluding your `<on_microsoft.com>` domain) in your Microsoft 365 organization have been onboarded to Email Security, and Email Security is their MX record. If a domain has not been onboarded or DNS is still propagating, you will impact production email flow for that domain.
115+
This step should not be performed until 24 hours after all domains (excluding your `<on_microsoft.com>` domain) in your Microsoft 365 organization have been onboarded to Email Security, and Email Security is their MX record. If a domain has not been onboarded or DNS is still propagating, you will impact production email flow for that domain.
116116
:::
117117

118118
#### Create Connector

0 commit comments

Comments
 (0)