Knowledgebase: Provisioning
Configuring Office 365 Remote Journaling
Posted by Walter Addley, Last modified by Neil King on 07 May 2019 04:42 PM

Office 365 uses Remote Journaling (SMTP Journaling).  This guide will go over the full configuration for both Proofpoint Essentials and Office 365.

Proofpoint Essentials Archive configuration

  1. Click on the Archive tab.  If only the current Archive is enabled you will be taken directly to the configuration page.  If Legacy Archiving is also enabled please click "LAUNCH EMAIL ARCHIVE" on the popup prompt.
  2. Click the Gear icon on the left side of the page and then select Connections
  3. Click the Plus icon to create a new connection.
  4. Provide a Description of the connection and set Connection Type to SMTP (Office 365)
  5. Enter the Undeliverable Journal Address. 
    NOTE: This must match the Email address entered to Step 5 in "Configuring Office 365 to Remote Journal Message Data to Proofpoint Essentials" below.  If these do not match Remote Journaling will not function.  This Email address will not be Journaled, and is only for error reporting.
  6. Click Next
  7. Note down the Email address provided.  This can be reviewed later by editing the rule.  This is required for the configuration on Office 365.
  8. Click Done

Configuring an Outbound Connector on Office 365

  1. Open the Office 365 Administration Portal.
  2. Click Admin (in the toolbar) and choose Exchange (in the list on the left). The Exchange admin center appears.
  3. Click mail flow (in the list on the left).
  4. Click the connectors tab.
  5. Add an outbound connector (click the “+” sign).
  6. Select Office 365 from the From menu and Partner Organization from the To menu.
  7. Click Next.
  8. Enter a descriptive Name (and optionally, Description) for the connector.
  9. Choose whether to have the connector turned on when you save it (check Turn it on).  You can also edit the connector and check the box at any time.
  10. Click Next.
  11. Select “Only when email messages are sent to these domains”, then click + and enter the fully qualified domain name of the mail server.  (A wild card domain of * will work for the domain).
  12. Click OK to return to the connectors screen.
  13. Select “Use the MX record associated with the partner’s domain”.
  14. Click Next.
  15. A new screen opens, showing your configuration choices. To make any necessary corrections, click Back, otherwise click Next.
  16. When prompted to validate the connection, click Validate.
  17. Enter the email address to which a test message can be sent.
  18. Validation results are shown. To dismiss the results, click Close. 
    NOTE: Please use the address "" to receive the verification message, as any other address will fail.

Configuring Office 365 to Remote Journal Message Data to Proofpoint Essentials

  1. Open the Office 365 Administration Portal.
  2. Click Admin (in the toolbar), and choose Exchange (in the list on the left). The Exchange admin center appears.
  3. Click compliance management (in the list on the left).
  4. Click the journal rules tab.
  5. Right above the action icons, where it says "Send undeliverable journal reports to:", click Select address, click Browse, and select an admin email account. This account will receive notification of non-deliverable journal reports. 
    NOTE: This must match the address set in Step 5 in "Proofpoint Essentials Archive configuration" above.
  6. Add a new journal rule (click the “+” sign).  The Journal Rule screen appears.
  7. In the Send journal reports to field, enter the email address of the journaling mailbox (e.g. 
    NOTE: This was provided in Step 7 in "Proofpoint Essentials Archive configuration" above.
  8. Enter a descriptive Name for the rule (e.g. Journaling to Proofpoint Archive).
  9. From the “If the message is sent to or received from...” list, choose Apply to all messages.
  10. From the “Journal the following messages...” list, choose All messages.
  11. Click Save.
  12. When prompted to confirm that you want the rule to apply to all messages, click Yes.

Note: To confirm that data is now being archived successfully please make sure to login and search the Archive with a user that has 'Discovery User' access to all Mailboxes. 

See steps below to set this access:

  1. Login with Organization Admin for the customer account that the Archive has been configured for (Channel and Partner admins will be unable to search their customers archived data as per normal security standards)
  2. Click on the Archive tab (If prompted, click on LAUNCH EMAIL ARCHIVE) and a new window will open
  3. Click on the Users icon 
  4. Search for the Organization Admin you are logged in with and click on the pencil icon to edit the settings
  5. Check the 'Discovery User' checkbox, select 'All Mailboxes' radio button and click SAVE