Skip to content

[Email Security] Add Configure journal rule instructions #24353

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Aug 12, 2025
Merged

[Email Security] Add Configure journal rule instructions #24353

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1a70dc6
[Email Security] Add Configure journal rule instructions
Maddy-Cloudflare Aug 12, 2025
5b5bbc0
Apply suggestions from code review
Maddy-Cloudflare Aug 12, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 27 additions & 2 deletions ...up/post-delivery-deployment/bcc-journaling/journaling-setup/m365-journaling.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,9 +16,9 @@ To enable Microsoft 365 journaling deployment:
1. Log in to [Zero Trust](https://one.dash.cloudflare.com/) > **Email Security**.
2. Select **Overview**. If you have not purchased Email Security, select **Contact Sales**. Otherwise, select **Set up** > **BCC/Journaling**.
3. Select **Integrate with MS** > **Authorize**.
4. Continue with [Integrate with Microsoft 365](/cloudflare-one/email-security/setup/post-delivery-deployment/bcc-journaling/journaling-setup/m365-journaling/#integrate-with-microsoft-365) to connect your Microsoft integration.
4. Continue with [Integrate with Microsoft 365](/cloudflare-one/email-security/setup/post-delivery-deployment/bcc-journaling/journaling-setup/m365-journaling/#1-integrate-with-microsoft-365) to connect your Microsoft integration.

## Integrate with Microsoft 365
## 1. Integrate with Microsoft 365

To integrate with Microsoft 365:

Expand Down Expand Up @@ -51,6 +51,31 @@ To view your connected domains:
1. Go to **Settings**.
2. Locate your domain, select the three dots > **View domain**. Selecting **View domain** will display information about your domain.

## 2. Configure journal rule

1. Log in to the [Microsoft Purview compliance portal](https://compliance.microsoft.com/homepage).

2. On the sidebar, go to **Settings** (the gear icon) > **Data Lifecycle Management** > **Exchange (legacy)**.

3. In **Send undeliverable journal reports to** enter the email address of a valid user account. Note that you cannot use a team or group address. Select **Save** once you entered the email address.

4. On the sidebar, go to **Solutions** > **Data Lifecycle Management** > **Exchange (legacy)**.

5. Select **Journal rules**.

6. Select **New rule** to configure a journaling rule, and configure it as follows:

- **Send journal reports to**: This is the address you copied and pasted in step 5 of [Connect your domains](/cloudflare-one/email-security/setup/post-delivery-deployment/bcc-journaling/journaling-setup/m365-journaling/#connect-your-domains).
- **Journal rule name**: `Journal Messages to Email Security`
- **Journal messages sent or received from**: *Everyone*
- **Type of message to journal**: *External messages only*

7. Select **Next**.

8. Verify the information is correct, and select **Submit** > **Done**.

Once saved, the rule is automatically active. However, it may take a few minutes for the configuration to propagate and start pushing messages to Email Security. After it propagates, you can [monitor your inbox](/cloudflare-one/email-security/email-monitoring/) in the Cloudflare dashboard to check the number of messages processed. This number will grow as journaled messages are sent to Email Security from your Exchange server.

## Next steps

<Render file="email-security/enable-logs" />
Loading