Configure Zoho Mail with ESA / CES

Configure Mail from Cisco Secure Email to Zoho Mail (Inbound)

Recipient Access Table

Configure Recipient Access Table (RAT) to accept mail for your domains:

1. Navigate to Mail Policies > Recipient Access Table (RAT).
2. Click Add Recipient.
3. Add your domains in the Recipient Address field.
4. Choose the default action of Accept.
5. Click Submit.
6. Click Commit Changes in the upper right-hand of the UI to save your configuration changes.

SMTP Routes

Set the SMTP route to deliver mail from Cisco Secure Email to your Zoho Mail domain:

1. Navigate to Network > SMTP Routes.
2. Click Add Route...
   • Receiving Domain: enter your domain name.
   • Destination Hosts: add your original Zoho Mail MX record.
3. Click Submit.
4. Click Commit Changes in the upper right-hand of the UI to save your configuration changes.

Destination Controls

Impose a self-throttle to a delivery domain in your Destination Controls as you do not want any throttling by Zoho due to its unknown reputation.

1. Log in to your Gateway.
2. Navigate to Mail Policies > Destination Controls.
3. Click Add Destination and configure settings:
   • Destination: enter your domain name
   • Concurrent Connections: 10
   • Maximum Messages Per Connection: 20
   • TLS Support: Preferred
4. Click Submit.
5. Click Commit Changes in the upper right-hand of the User Interface (UI) to save your configuration changes.

DNS (MX Record) Configuration

You are ready to cut over the domain through a Mail Exchange (MX) record change. Work with your DNS administrator to resolve your MX records to the IP addresses for your Cisco Secure Email Cloud instance, as provided in your Cisco Secure Email welcome letter.

Configure Mail from Zoho Mail to Cisco Secure Email (Outbound)

Configure RELAYLIST on Cisco Secure Email Gateway

Refer to your Cisco Secure Email welcome letter. In addition, a secondary interface is specified for outbound messages via your Gateway.

1. Log in to your Gateway.
2. Navigate to Mail Policies > HAT Overview. 

Note: Make sure the Listener is for Outgoing. OutgoingMail, or MailFlow-Ext etc are most common names used.

1. Click Add Sender Group...
2. Configure the Sender Group as:
   • Name: RELAY_ZOHO
   • Comment: <<enter a comment if you wish to notate your sender group>>
   • Policy: RELAYED
   • Click Submit and Add Senders.
   • Sender: hostname of your zoho based domain (e.g .zoho.com) Note: The . (dot) at the beginning of the sender domain name is required.
3. Click Submit.
4. Click Commit Changes in the upper right-hand of the UI to save your configuration changes.

Enable TLS

1. Click <<Back to HAT Overview.
2. Click the Mail Flow Policy RELAYED. Under section Encryption and Authentication. For TLS, choose: Preferred.
3. Click Submit.
4. Click Commit Changes in the upper right-hand of the UI to save your configuration changes.