Support Center > Search Results > SecureKnowledge Details
Mail-Flow Rules Order in CloudGuard SaaS - Office365 Exchange Online Technical Level

Office 365 Mail-Flow Rules automate actions on emails-in-traffic based on custom policies. In most enterprise environments, every mail-flow rule falls under either Delivery Rule or Modification Rule.

Delivery Rule: A mail-flow rule that modifies the delivery of the email. Here are few examples: 

  • Quarantine emails from ""
  • Whitelist emails coming from IP
  • Mark emails with Nickname = "John" as Spam (SCL)
  • Send emails to Connector XYZ
  • Forward emails sent to X to Y

Modification Rule: A mail-flow rule that modifies the content of the email. Here are few examples:

  • Add "[EXTERNAL]" to the subject if sender is Outside Organization
  • Add disclaimer to the email body footer

Check Point Mail-Flow Optimal Priority

The Check Point Protect policy for Office 365 Exchange automatically creates a mail-flow rule with the name of "Check Point - Protect" with a default priority of 0 (highest priority).

Unless you have a reason to keep your rules in a specific order, keep the Delivery Rules on top of the Modification Rules. Place the Check Point Protect Rule between the Delivery Rules and the Modification Rules.

Consult with Check Point Support if one of the following is true:

  • There is a 3rd party integration that receives the mail-flow.
  • The rules only function is a specific order.

Give us Feedback
Please rate this document