Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.

This topic outlines the steps to configure outbound mail routing from Office 365 through Cyren.


By default, emails sent from Office 365 are DKIM signed, using the default domain:


Cyren uses this information to validate the outbound email originated from the sender, and accepts the mail for outbound delivery.

The most reliable way a customer can check that this default DKIM signature is in place, is by inspecting a delivered outbound email, and ensuring that the d= field on the DKIM signature represents [Customer] 

Code Block
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=[Customer]; s=selector1-company-tld;


It is possible to configure DKIM in Office 365 to use a different domain, or ‘(default signing domain)’, however this configuration is not currently supported.

Cyren Cloud Security Configuration

In Settings > Account take a note of your Customer ID (657nnn) in this instance.

Image Added

In Settings>Email Services>Security>Outgoing Email Hosts add an email host in the following format: 


The second, third and fourth octet in the IP address added must represent your Customer ID.

Office 365 Configuration Steps

From the Office 365 Exchange Admin Center:

  1. Select Mail Flow>Connectors, and add a new Connector.
  2. Set From: to Office 365, and To: to Partner Organization, click Next.

    Image Added
  3. Type in a connector name in the *Name field, for example, Outbound Cyren Connector.

    It is mandatory to check the Turn it on checkbox.

    Image Added

  4. Select Only when email messages are sent to these domains and add an * to the domain list, and click Next.

    Image Added

  5. Select Route through these email smart hosts, and add to the list, and click Next.

    Image Added
  6. Select ‘Always use TLS’, and select ‘Issued by a trusted certificate authority (CA)’, click Next, and once again Next.

    Image Added

  7. In the Validate screen, add an external email address and click Validate.
    Image Added
Validation will fail if your domain ( has not been added to your Cyren account as a domain in Settings > Email Services>Security>Email Gateway Settings.