ExchangeDefender Deployment Guide | ExchangeDefender [ Skip to content ](#main) [ ![ExchangeDefender](/assets/images/xd_logo_blue.png) ](/) Email Security ![Platform Overview](/assets/images/m-xd-pro.png)### ExchangeDefender PRO Enterprise-grade email security made simple for every business. [Sign Up](/sign-up) [Live Demo](/demo) [Email Security Stops spam, malware & phishing in real time. ](/email-security) [Encryption Secure your emails, attachments & sensitive data. ](/corporate-email-encryption) [Web File Sharing Easy, safe cloud file sharing with access control. ](/web-file-server) [Live Archive Locked-in email backup & continuity during outages. ](/livearchive-backup) [Emergency Inbox Keep email flowing without interruption if your provider fails. ](/inbox) [Spearphish Train your team with phishing simulations & risk tracking. ](/spearphishing) Managed Email ### Enterprise-Grade Managed Email Reliable, secure, and fully managed email operations for modern organizations. ![ExchangeDefender](/assets/images/managed_email_menu.png) [Microsoft365/Google Email Management Expert management and security for Microsoft 365 and Google Workspace email. ](/managed-email-operations) [AI Advisory Secure, practical AI consulting & implementation for SMBs. ](/management-ai) Company ### ExchangeDefender: 29+ Years of Trust We are a cybersecurity company focused on business email protection, with 29+ years of experience keeping organizations secure, connected, and resilient. ![ExchangeDefender](/assets/images/careers_1.png) [ About Us Learn our purpose, values, and the mission behind every decision. ](/about-us) [ Blog News, product updates and email security insights. ](/blog) [ Capabilities Discover the tech and expertise that keep your email secure around the clock ](/capabilities) [ Careers Be part of a team using modern tech to solve real threats and ship great work. ](/careers) [Partners](/partners) [Docs](/docs) [Contact Us](/contact) Talk to a Human Open menu Menu ---- Email Security [Email Security](/email-security) [Encryption](/corporate-email-encryption) [Web File Sharing](/web-file-server) [Live Archive](/livearchive-backup) [Inbox](/inbox) [Spearphish](/spearphishing) Managed Email [Microsoft365/Google Email Management](/managed-email-operations) [AI Advisory](/management-ai) Company [About Us](/about-us) [Blog](/blog) [Capabilities](/capabilities) [Careers](/careers) [Partners](/partners) [Docs](/docs) [Contact Us](/contact) Talk to a Human Search documentation On this page On this page ------------ - [Network Configuration](#network-configuration) - [MX Record](#mx-record) - [Outbound Smarthost](#outbound-smarthost) - [Exchange 2007/2010](#exchange2007-2010) - [Exchange 2003](#exchange-2003) - [IP Restrictions](#ip-restrictions) - [Exchange 2007/2010](#ip-exchange-2007-2010) - [Exchange 2003](#ip-exchange-2033) [ Documentation ](https://www-preview.exchangedefender.com/docs) [Documentation](https://www-preview.exchangedefender.com/docs)ExchangeDefender Deployment Guide ================================= ExchangeDefender Deployment Guide. Network Configuration [¶](#network-configuration) --------------------------------------------------- In order to properly deploy ExchangeDefender, you need to make several changes on your network. First, you have to change your MX record to point all of your inbound mail to ExchangeDefender. This way ExchangeDefender will stand in front of your mail server and bounce all the dangerous content that is sent to your network. Then, you should change your outbound smarthost to allow us to scan all of your outbound mail\*. Finally, enforce IP restrictions so that you can only exchange mail through a trusted connection with ExchangeDefender. *For users that rely on email for correspondence, outbound network will automatically archive all outbound emails. If you have a business requirement that includes sending out notifications, automated responses, marketing, large distribution lists or other noncorrespondence items, we offer outbound-jr high speed relay designed for that specific need. MX Record [¶](#mx-record) --------------------------- Please modify your MX record and change it to: **inbound30.exchangedefender.com** You should not have any other MX records for your domain name (subdomain MX records are OK). Outbound Smarthost [¶](#outbound-smarthost) --------------------------------------------- Please modify your SMTP server to route all outbound mail through the following smarthost: **outbound.exchangedefender.com** Please follow these instructions to modify the smarthost on Exchange 2003 and 2007: ### Exchange 2007/2010 [¶](#exchange2007-2010) 1. Login as the Administrative user to your Exchange 2007/2010 server and open **Exchange Management Console.** ![](/images-documentation/xd-2007-console.png) 2. Expand Organizational Configuration, click **Hub Transport.** ![](/images-documentation/xd-2007-hub-transport.png) 3. On the right hand side under **Actions** click **New Send Connector.** ![](/images-documentation/xd-2007-send-connector.png) 4. Give the Send Connector a name and select the intended use as *Custom* ![](/images-documentation/xd-2007-custom.png) 5. Click the **Add** button on the Address Space screen. 6. Under Address put the recipient domain name, check include all sub-domains and leave the cost as low as possible, click **OK**. ![](/images-documentation/xd-2007-sub-domains.png) 7. Click **Next** ![](/images-documentation/xd-2007-next.png) 8. Select the radio button to "Route mail through the follow smart hosts:" and click **Add**. ![](/images-documentation/xd-2007-route-mail.png) 9. Select the radio button to "Fully qualified domain name (FQDN):" and enter *"outbound.exchangedefender.com"* and click **OK**. ![](/images-documentation/xd-2007-smart-host.png) 10. At this point, you should be able to see the server you specified listed then click **Next**. ![](/images-documentation/xd-2007-server.png) 11. Since ExchangeDefender uses your server's IP Address to authenticate access, leave the radio button set to Authentication Settings "**None**" and click **Next**. ![](/images-documentation/xd-2007-ip-address.png) 12. On the source server screen verify that the exchange server is listed (If not, click Add and find the server) and then click **Next**. ![](/images-documentation/xd-2007-smtp-connector.png) 13. On the final screen you will see the commands that will be run to create the send connector. Click **New** and on then **Finish**. ### Exchange 2003 [¶](#exchange-2003) 1. Login to your Exchange 2003 server and open *System Manager*. ![](/images-documentation/xd-2003-system-manager.png) 2. Expand Connectors, right click **Small Business SMTP Connector** (or your active outgoing SMTP connector) and select properties. ![](/images-documentation/xd-2003-smtp-connector.png) 3. In the general tab, set the radio option to Forward all mail through this connector to the following smart hosts and input: **outbound.exchangedefender.com** ![](/images-documentation/xd-2003-general.png) 4. Navigate to the Address Space tab and ensure there is one entry with the address specified as \* and the Cost as 1. ![](/images-documentation/xd-2003-address-space.png) IP Restrictions [¶](#ip-restrictions) --------------------------------------- Enforcing IP restrictions is absolutely critical to complete protection of your mail server. Because hackers and spammers can easily bypass cloud services and target your server directly, mail servers protected by ExchangeDefender should accept anonymous SMTP connections only from the ExchangeDefender networks listed below: 65.99.255.0/24 206.125.40.0/24 You should allow inbound SMTP traffic from the above IP ranges only and deny all other traffic. You should only allow outbound SMTP traffic from your mail server to the ExchangeDefender outbound servers. Please follow these instructions to enforce IP restrictions on Exchange 2003 and 2007: ### Exchange 2007/2010 [¶](#ip-exchange-2007-2010) To program the IP address restrictions on the receive connector in Exchange 2007: 1. Obtain the latest list of ExchangeDefender IPs from the ExchangeDefender Deployment Guide under [Configuring IP Restrictions](#ip-restrictions) 2. Open **Exchange Management Console** ![](/images-documentation/xd-2007-2010-xd-management-console.png) 3. SBS Users: Right click on the "SBS Internet Mail Connector" and select Properties NON-SBS Users: Right click on "Default SERVERNAME" and select "Properties". ![](/images-documentation/xd-2007-2010-xd-sbs-users.png) 4. Once the dialog box pops up select the "Network" tab: ![](/images-documentation/xd-2007-2010-network.png) 5. Under "Receive mail from remote servers that have these addresses:" find the entry that says 0.0.0.0-255.255.255.0 and **delete** the record. 6. Under "Receive mail from remote servers that have these addresses:" click **Add**. Input the first ExchangeDefender IP range/netmask. Repeat this step for each ExchangeDefender IP network in the deployment guide. ![](/images-documentation/xd-2007-2010-ip-address.png) 7. Please ensure under the Authentication tab that Anonymous delivery is allowed from our ranges. ![](/images-documentation/xd-2007-2010-permission-groups.png) ### Exchange 2003 [¶](#ip-exchange-2033) 1. Obtain the latest list of ExchangeDefender IPs from the ExchangeDefender Deployment Guide under Configuring IP Restrictions. ![](/images-documentation/xd-2003-configuring-ip-restrictions.png) 2. Login to your Exchange 2003 server and open **System Manager**. 3. Expand Servers, ServerName, Protocols, SMTP - right click "Default SMTP Virtual Server" (Or the active receive connector name) and select properties. ![](/images-documentation/xd-2003-serverName.png) 4. Navigate to the Access tab and then select the **Connection button**. ![](/images-documentation/xd-2003-access.png) 5. Remove any entries from previous providers or entries that have the IP range 0.0.0.0 - 255.255.255.0 6. Click **Add** to enter a new IP restriction. Select the Group of computers option, insert the first IP range for ExchangeDefender and set the subnet mask to 255.255.255.0 - click **OK**. Repeat this step for each ExchangeDefender network. ![](/images-documentation/xd-2003-group-computers.png) 7. Restart the Simple Mail Transfer Protocol (SMTP) service to apply the changes. **Warning:** Do not enforce IP restrictions until at least 72 hours after the MX record change. Enforcing IP restrictions while your old DNS zone is still cached on the Internet will result in a permanent mail loss and mail delays. Should the IP restrictions be applied on the firewall or on the mail server? We are frequently asked this question and the answer depends on whether you have external users or third parties attempting to relay mail through your mail server. If you have external connections to your SMTP server (from third party vendors or mobile users) then it is easier to enforce restrictions on the mail server and enforce password protected SMTP access there. However, if you do not have external connections the restrictions should be enforced on the firewall in order to free up resources on the mail server. [ Next Encryption → ](https://www-preview.exchangedefender.com/docs/encryption) Solutions --------- - [Stop Spam & Malware](/email-security) - [Hands-Free Email Backup](/livearchive-backup) - [Instant Email Recovery](/inbox) - [Send Private Emails](/corporate-email-encryption) - [Train Against Email Threats](/spearphishing) - [Share Files Safely](/web-file-server) Company ------- - [About ExchangeDefender](/about-us) - [Compliance & Legal](/our-compliance) - [Become a Partner](/partners) - [Support Portal Login](https://support.exchangedefender.com/) - [Microsoft 365 Email Management](/managed-email-operations) - [AI Advisory Service](/management-ai) ![ExchangeDefender](/assets/images/dark-xd-logo.png)USA: +1 (407) 465-6800 United Kingdom: 0800 8620149 Australia: +61 0390010641 Fax: +1 (954) 839-8737 [ ](https://www.facebook.com/ExchangeDefender) [ ](https://www.twitter.com/XD_Defender) [ ](https://www.linkedin.com/company/exchangdefender) [ ](/blog) © 2026 Own Web Now Corp - All rights reserved </> with ❤️ in Orlando [SLA](/sla) [TOS](/tos) [PRIVACY](/privacy-end-users) [AUP](/aup) We're Here to Help 👋 -------------------- Tired of AI 🤖 and hold music? Request a call or text (sms/telco charges may apply) and someone with a brain and a pulse will get in touch with you promptly. Close modal Website Name Email Address Company Phone Preferred Contact Method Text me Call me Call Date Call Time Time Zone Eastern Central Mountain Pacific London Paris Madrid Berlin Tokyo Dubai Sydney Request Human Contact Submitting... Close Start Your Free Year -------------------- Enter your details and we will set up your free year of email protection. Close modal Website Full Name Email Continue Submitting... Close Try ExchangeDefender for Free 💰 ------------------------------- We look forward to helping you secure your email. We offer a free 30-day no-risk trial, just fill out the form below and one of our onboarding techs will get you started. If you'd just like to take a look at the demo, click here for a [live demo site](/demo). Close modal Website Name Email Address Company Phone Preferred Contact Method Text me Call me Call Date Call Time Time Zone Eastern Central Mountain Pacific London Paris Madrid Berlin Tokyo Dubai Sydney 💰 Get your free month Submitting... 🏃 Explore a Live Demo Submitting... Close Train Your Team Before the Hackers Do 👋 --------------------------------------- ExchangeDefender Spearphish is our new phishing simulation and training tool, designed to help your team spot scams before they click. Want to be first in line? Request early access or get a personal demo — just drop your name and email below. Close modal Website Name Email Address Company Phone Preferred Contact Method Text me Call me Call Date Call Time Time Zone Eastern Central Mountain Pacific London Paris Madrid Berlin Tokyo Dubai Sydney Request Early Access Submitting... Close