better security for smtp relays

[Daniel_Kavan]

Hi,

Is it best practice to define a server that is just doing smtp relay as a mail server ie exchange when the object is defined RE: servers - Mail server?   I don't think so but wanted to double check.  Any other, important, specific IPS protections?

RE: outbound mail.  With Harmony Email and office is there additional security for smtp relay servers?  

Also, RE: inbound mail -  I assume with HE&O there you still define the gw as an MTA stop.

Thanks in advance for any tips or suggestions for better smtp security.

[PhoneBoy]

Those server objects are for certain legacy configurations.
I don't believe they are necessary any longer.
Unless the gateway is an MTA (requires Threat Prevention and/or DLP), if the SMTP connection is TLS, there's not much IPS can do.

In any case, if you can provide more specifics about your exact use case, it might help.

[Chris_Atkinson]

HEO is primarily an API approach for seamless native integration with O365 / G-Suite / SaaS.

What's you scenario... O365, on-prem, hybrid?