Prerequisites for email protection activation – Microsoft O365
Access Microsoft 365, we enter the “Defender Portal” (security). Once inside we expand the “Email & Collaboration” menu in the left sidebar:
- We access “Policies & Rules” -> “Threat Policies” -> “Anti-Spam”.
- Select “Connection Filter Policy” in the policy details to make modifications.

- Click on “Edit connection filter policy” and configure the following:

“Always allow messages from the following IP addresses or address range”, adding the list of IPs according to your country:
• If your country is in Europe:
194.104.108.0/24
194.104.109.0/24
194.104.110.0/24
194.104.111.0/24
147.28.34.0/24
147.28.35.0/24
51.163.158.0/24
51.163.159.0/24
62.140.7.0/24
62.140.10.0/24
• If your country is in America:
170.10.132.0/24
170.10.133.0/24
170.10.128.0/24
170.10.129.0/24
170.10.130.0/24
170.10.131.0/24
207.211.31.0/25
207.211.30.0/24
205.139.110.0/24
205.139.111.0/24
216.205.24.0/24
63.128.21.0/24
- Click on “Add to Safe List” and then on “Save”.
When creating an input connector, email protection recommends disabling Microsoft Defender Safe Links, as they may conflict with the URL protection of the email protection. See the following link* to do it.
*(This configuration is supported by Microsoft, if any problems arise, contact them for help.)
The email protection delivery path is configured to deliver all incoming messages to a specific hostname, which, in this case, is the MX record of the Microsoft 365 account. To deliver the emails to your Microsoft 365 service, you must determine your host name, to do this follow the following steps:
- Access “Microsoft 365 Admin Center”
- Select one of the following options, the one that appears in your menu:
- “Domains”
- or “Setup | Domains”

- Click on “Domain Settings tab” for the domain we want to configure.
- Please note the value of the MX.
- This MX value is sent by email to the Cyber Guardian team for configuration (support@cyberguardian.tech).
You can then continue with activation of email protection here.