Mail Flow Connector

Inbound and outbound mail flow connectors. Misconfigured connectors are a common spoofing / smart-host hijack vector.

Part of the Exchange inventory.

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Weekly	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	Yes

Properties

Property	Type	Description	Automation placeholder
Cloud Services Mail Enabled	Boolean		{{MailFlowConnector.CloudServicesMailEnabled}}
Connector Id	String		{{MailFlowConnector.ConnectorId}}
Connector Type	String	Allowed values: OnPremises, Partner.	{{MailFlowConnector.ConnectorType}}
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	{{MailFlowConnector.CreatedTime}}
Direction	String	Allowed values: Inbound, Outbound.	{{MailFlowConnector.Direction}}
Connector Name	String		{{MailFlowConnector.DisplayName}}
Enabled	Boolean		{{MailFlowConnector.Enabled}}
Has Wildcard Domain	Boolean	True when sender or recipient domains contain a wildcard (`*`) — overly broad and a known misconfig pattern.	{{MailFlowConnector.HasWildcardDomain}}
Is Transport Rule Scoped	Boolean		{{MailFlowConnector.IsTransportRuleScoped}}
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	{{MailFlowConnector.LastModifiedTime}}
Recipient Domains	String[]	Domains routed by this outbound connector.	{{MailFlowConnector.RecipientDomains}}
Require TLS	Boolean		{{MailFlowConnector.RequireTls}}
Restrict Domains To Certificate	Boolean	Whether the connector restricts senders to those whose cert matches the configured domains.	{{MailFlowConnector.RestrictDomainsToCertificate}}
Risk Score	Int32	Stores risk score	{{MailFlowConnector.RiskScore}}
Risk Score Update	DateTime	Stores risk score update	{{MailFlowConnector.RiskScoreLastUpdate}}
Risk Score Value	String	Stores risk score value like Low_Low	{{MailFlowConnector.RiskScoreValue}}
Route All Messages Via On-Premises	Boolean		{{MailFlowConnector.RouteAllMessagesViaOnPremises}}
Sender Domains	String[]	Domains accepted by this inbound connector.	{{MailFlowConnector.SenderDomains}}
Sender IP Addresses	String[]	Source IP ranges trusted by this inbound connector.	{{MailFlowConnector.SenderIPAddresses}}
Smart Hosts	String[]	Smart-host targets for this outbound connector.	{{MailFlowConnector.SmartHosts}}

Relations

This object does currently not have any relations.

Segments

Segment	Description
Inbound connectors	Mail flow connectors handling inbound mail delivery.
Connectors without TLS	Mail flow connectors that do not require TLS encryption.
Outbound connectors	Mail flow connectors handling outbound mail routing.

Actions

This object does currently not have any actions.

Policies that check this object

Policy	Severity	Description
Mail flow connector with wildcard domain	Medium	Detects inbound or outbound connectors with wildcard sender or recipient domains.