Configuring the O365 Mail Sender and O365 Mail Receiver Tests

Now that the components have been added, proceed to configure the simulation. For that, you need to configure the O365 Mail Sender and O365 Mail Receiver tests mapped to the Sender and Receiver (respectively) components you just added.

Configuring the O365 Mail Sender Test

Upon clicking the Add button when adding an O365 Mail Sender component, Figure 1 will appear displaying the component you just added. Click on the icon corresponding to that component to configure tests for that component.

Figure 1 : Viewing the details of the O365 Mail Sender component that has been added

In the page that appears next, select the O365 Mail Sender test that is displayed in the Tests to be Configured list box, and click the Configure button beneath. Figure 2 will then appear, displaying the pre-configured and unconfigured parameters of the O365 Mail Sender test.

Figure 2 : Configuring the O365 Mail Sender test

The O365 Mail Sender test periodically emulates a user on Exchange Online sending a 'uniquely tagged' email to a configured receiver. In the process, the test reports metrics revealing the health of the mail sending function.

For the test to run and perform the simulation, you need to configure the test with the following:

Indicate how frequently you want the simulation to run by selecting an option from the TEST PERIOD list.
Specify a unique MAIL TAG using which you want to tag the emulated email. This enables the eG Enterprise system to keep track of the simulated email. To be able to simulate the email activity end-to-end - i.e., from transmission to reception - you should configure both the O365 Mail Receiver and the O365 Mail Sender tests with the same MAIL TAG.
Next, proceed to indicate which mailbox on Exchange Online should send the emulated email. For this, configure the email ID of the O365 MAIL SENDER. For best results, make sure that you provide the email ID of a valid mailbox on Exchange Online. You may want to configure a dedicated mailbox for the purpose of this emulation.
To send an email, the eG external agent needs to access the configured sender's mailbox. In order to enable the agent to access the sender's mailbox, you need to configure this test with the access credentials of the sender on Exchange Online. For this purpose, specify the password for access against O365 MAIL SENDER PASSWORD. Confirm the password by retyping it in the CONFIRM PASSWORD text box.
Next, you need to indicate who the email should be sent to. For that, enter the email ID of the receiver against O365 MAIL RECEIVER.
As mentioned already, the test uses the Exchange Online email service to perform the simulation. In order to enable the test to connect to this service, type the WEBSERVICE URL of that service.
The Tenant parameter enables the eG agent to use Azure AD Certificate-based Authentication for accessing an O365 tenant and its services (such as Exchange Online).

Azure AD certificate-based authentication (CBA) enables customers to allow or require users to authenticate with X.509 certificates against their Azure Active Directory (Azure AD) for applications and browser sign-in. When monitoring highly secure Office 365 environments, you can configure the eG agent to identify itself to a tenant using a valid X.509 certificate, so that it is allowed secure access to the tenant and its resources.

By default, the value of the TENANT parameter is none. This means that, by default, the eG agent does not use certificate-based authentication to connect to an O365 tenant.

if you want the eG agent to use this modern authentication technique to securely access a tenant's resources, you should do the following:
- Enable Azure AD Certificate-based authentication for the target O365 tenant; this can be achieved manually, via the Office 365 portal, or automatically, using Powershell scripts we provide. For the manual procedure, refer to Manually Enabling Certificate-based Authentication For an Office 365 Tenant. For the automatic procedure, refer to Automatically Fulfilling Pre-requisites in a Modern Authentication-Enabled Environment.
  
  When enabling certificate-based authentication, an X.509 certificate will be generated for the target tenant.
- Configure the Tenant Name parameter with the name of the tenant for which certificate-based authentication is enabled. Using the tenant name, the eG agent will be able to read the details of the X.509 certificate that is generated for that tenant, and use that certificate to access that tenant's resources. To determine the tenant name, do the following:
  - Log in to the Microsoft 365 Admin Center as an administrator.
  - Under Setup, click on Domains.
  - Find a domain that ends with .onmicrosoft.com - this is your Microsoft O365 tenant name.
The DOMAIN, DOMAIN USER NAME, DOMAIN PASSWORD, and CONFIRM PASSWORD parameters are applicable only if the eG agent needs to communicate with the Office 365 portal via a Proxy server.

In this case, in the Domain text box, specify the name of the Windows domain to which the eG agent host belongs. In the Domain User Name text box, mention the name of a valid domain user with login rights to the eG agent host. Provide the password of that user in the Domain Password text box and confirm that password by retyping it in the Confirm Password text box.

On the other hand, if the eG agent is not behind a Proxy server, then you need not disturb the default setting of these parameters. By default, these parameters are set to none.
The PROXY HOST, PROXY PORT, PROXY USER NAME, PROXY PASSWORD, and CONFIRM PASSWORD parameters are applicable only if the eG agent needs to communicate with the Office 365 portal via a Proxy server.

In this case, provide the IP/host name and port number of the Proxy server that the eG agent should use in the Proxy Host and Proxy Port parameters, respectively.

If the Proxy server requires authentication, then specify the credentials of a valid Proxy user against the Proxy User Name and Proxy Password text boxes. Confirm that password by retyping it in the Confirm Password text box. If the Proxy server does not require authentication, then specify none against the Proxy User Name, Proxy Password, and Confirm Password text boxes.

On the other hand, if the eG agent is not behind a Proxy server, then you need not disturb the default setting of any of the Proxy-related parameters. By default, these parameters are set to none.
By default, every time this test runs, the eG external agent will send a single email from the configured sender to the receiver. This is why the NUMBER OF MESSAGES parameter is set to 1 by default. If required, you can configure the eG external agent to send out multiple emails to the receiver, every time the test runs. For this, you need to increase the value of the NUMBER OF MESSAGES parameter.
By default, the TIMEOUT parameter of the test is set to 30 seconds. This means that, by default, the test will wait for a maximum of 30 seconds to connect to the Exchange Online email service - i.e., to the configured WEBSERVICE URL. If the test is unable to connect to the email service even after the default period lapses, the test will automatically timeout. You can increase or decrease the timeout value, if you so need.
DD FREQUENCY refers to the frequency with which detailed diagnosis measures are to be generated for this test. The default is 1:1. This indicates that, by default, detailed measures will be generated every time this test runs, and also every time the test detects a problem. You can modify this frequency, if you so desire. Also, if you intend to disable the detailed diagnosis capability for this test, you can do so by specifying none against DD frequency
To make diagnosis more efficient and accurate, the eG Enterprise embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the detailed diagnosis capability of this test for a particular server, choose the On option against DETAILED DIAGNOSIS. To disable the capability, click on the Off option.

The option to selectively enable/disable the detailed diagnosis capability will be available only if the following conditions are fulfilled:
- The eG manager license should allow the detailed diagnosis capability
- Both the normal and abnormal frequencies configured for the detailed diagnosis measures should not be 0.

Once the test is configured, click on the Update button to save the changes. Next, proceed to configure the O365 Mail Receiver test mapped to the O365 Mail Receiver component.

Configuring the O365 Mail Receiver Test

Upon clicking the Add button when adding an O365 Mail Receiver component, Figure 3 will appear displaying the component you just added. Click on the icon corresponding to that component to configure tests for that component.

Figure 3 : Viewing the details of the Office 365 Mail Receiver component that has been added

In the page that appears next, select the O365 Mail Receiver test that is displayed in the Tests to be Configured list box, and click the Configure button beneath. Figure 4 will then appear, displaying the pre-configured and unconfigured parameters of the O365 Mail Receiver test.

Figure 4 : Configuring the O365 Mail Receiver test

The O365 Mail Receiver test periodically emulates a user on Exchange Online receiving an email that is uniquely tagged. In the process, the test reports metrics revealing the health of the mail receiving function.

Indicate how frequently you want the simulation to run by selecting an option from the TEST PERIOD list.
Specify a unique MAIL TAG using which you want to tag the emulated email. This enables the eG Enterprise system to keep track of the simulated email. To be able to simulate the email activity end-to-end - i.e., from transmission to reception - you should configure both the O365 Mail Receiver and the O365 Mail Sender tests with the same MAIL TAG.
Next, proceed to indicate which mailbox on Exchange Online should receive the emulated email. For this, configure the email ID of the O365 MAIL RECEIVER. Make sure that you specific the same O365 MAIL RECEIVER for both the O365 Mail Sender and O365 Mail Receiver tests.
The test should be able to access the receiver's mailbox, so it can check whether/not mails with the MAIL TAG have been received by it. To facilitate this check, specify the password of that mailbox against O365 MAIL RECEIVER PASSWORD. Confirm the password by retyping it in the CONFIRM PASSWORD text box.
As mentioned already, the test uses the Exchange Online email service to perform the simulation. In order to enable the test to connect to this service, type the WEBSERVICE URL of that service.
The Tenant parameter enables the eG agent to use Azure AD Certificate-based Authentication for accessing an O365 tenant and its services (such as Exchange Online).

Azure AD certificate-based authentication (CBA) enables customers to allow or require users to authenticate with X.509 certificates against their Azure Active Directory (Azure AD) for applications and browser sign-in. When monitoring highly secure Office 365 environments, you can configure the eG agent to identify itself to a tenant using a valid X.509 certificate, so that it is allowed secure access to the tenant and its resources.

By default, the value of the TENANT parameter is none. This means that, by default, the eG agent does not use certificate-based authentication to connect to an O365 tenant.

if you want the eG agent to use this modern authentication technique to securely access a tenant's resources, you should do the following:
- Enable Azure AD Certificate-based authentication for the target O365 tenant; this can be achieved manually, via the Office 365 portal, or automatically, using Powershell scripts we provide. For the manual procedure, refer to Manually Enabling Certificate-based Authentication For an Office 365 Tenant. For the automatic procedure, refer to Automatically Fulfilling Pre-requisites in a Modern Authentication-Enabled Environment.
  
  When enabling certificate-based authentication, an X.509 certificate will be generated for the target tenant.
- Configure the Tenant Name parameter with the name of the tenant for which certificate-based authentication is enabled. Using the tenant name, the eG agent will be able to read the details of the X.509 certificate that is generated for that tenant, and use that certificate to access that tenant's resources. To determine the tenant name, do the following:
  - Log in to the Microsoft 365 Admin Center as an administrator.
  - Under Setup, click on Domains.
  - Find a domain that ends with .onmicrosoft.com - this is your Microsoft O365 tenant name.
The DOMAIN, DOMAIN USER NAME, DOMAIN PASSWORD, and CONFIRM PASSWORD parameters are applicable only if the eG agent needs to communicate with the Office 365 portal via a Proxy server.

In this case, in the Domain text box, specify the name of the Windows domain to which the eG agent host belongs. In the Domain User Name text box, mention the name of a valid domain user with login rights to the eG agent host. Provide the password of that user in the Domain Password text box and confirm that password by retyping it in the Confirm Password text box.

On the other hand, if the eG agent is not behind a Proxy server, then you need not disturb the default setting of these parameters. By default, these parameters are set to none.
The PROXY HOST, PROXY PORT, PROXY USER NAME, PROXY PASSWORD, and CONFIRM PASSWORD parameters are applicable only if the eG agent needs to communicate with the Office 365 portal via a Proxy server.

In this case, provide the IP/host name and port number of the Proxy server that the eG agent should use in the Proxy Host and Proxy Port parameters, respectively.

If the Proxy server requires authentication, then specify the credentials of a valid Proxy user against the Proxy User Name and Proxy Password text boxes. Confirm that password by retyping it in the Confirm Password text box. If the Proxy server does not require authentication, then specify none against the Proxy User Name, Proxy Password, and Confirm Password text boxes.

On the other hand, if the eG agent is not behind a Proxy server, then you need not disturb the default setting of any of the Proxy-related parameters. By default, these parameters are set to none.
By default, the TIMEOUT parameter of the test is set to 30 seconds. This means that, by default, the test will wait for a maximum of 30 seconds to connect to the Exchange Online email service - i.e., to the configured WEBSERVICE URL. If the test is unable to connect to the email service even after the default period lapses, the test will automatically timeout. You can increase or decrease the timeout value, if you so need.
DD FREQUENCY refers to the frequency with which detailed diagnosis measures are to be generated for this test. The default is 1:1. This indicates that, by default, detailed measures will be generated every time this test runs, and also every time the test detects a problem. You can modify this frequency, if you so desire. Also, if you intend to disable the detailed diagnosis capability for this test, you can do so by specifying none against DD frequency.
To make diagnosis more efficient and accurate, the eG Enterprise embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the detailed diagnosis capability of this test for a particular server, choose the On option against DETAILED DIAGNOSIS. To disable the capability, click on the Off option.

The option to selectively enable/disable the detailed diagnosis capability will be available only if the following conditions are fulfilled:
- The eG manager license should allow the detailed diagnosis capability
- Both the normal and abnormal frequencies configured for the detailed diagnosis measures should not be 0.

Once the test is configured, click on the Update button to save the changes.

Finally, sign out of the eG admin interface.