Off-boarding

Off-boarding integrations

Off-boarding Microsoft 365 [Inline]

This page includes:

Follow the procedures below to off-board [offboard] a Microsoft 365 Inline integration with Perception Point X-Ray.

• For details about how to off-board a Microsoft 365 API integration with Perception Point X-Ray, see "Off-boarding Microsoft 365 [API]" on page 838.

• For details about how to off-board a Microsoft 365 Inline integration using a script, see "Off-boarding Microsoft 365 [Inline] - using a script" on page 836.

Step 1: Preparing to off-board a Microsoft 365 Inline integration - manually

To off-board a Microsoft 365 Inline integration - manually:

In Microsoft 365 Defender, open the Security page.

[https://security.microsoft.com]

1. Select Policies & rules.

2. Select Threat policies.

3. Under Policies, select Anti-spam.

Step 2: Removing the Perception Point IP addresses

1. Select Connection filter policy (Default) and then click Edit connection filter policy.

2. Under Always allow messages from the following IP addresses or address range, delete all the Perception Point IP addresses [see the table below].

Note: Remove the correct set of IP addresses - based on the environment of your organization. What is the environment of your organization In Perception Point X-Ray, go to Account > Preferences. The Environment of your organization will appear under General > Info: US, EU, or AU.

1. If you don't have any further IP addresses, clear the "Enable safe list" check box.

2. Click Save.

3. Click Close.

Step 3: Deleting the rules

In the Exchange admin center, click Mail flow > Rules.

[https://admin.exchange.microsoft.com/#/transportrules]

1. Select the Perception Point Redirect Rule.

2. Click Delete, and then click Confirm.

The rule may take a few seconds to be deleted.

1. Select Send Office 365 spam emails to Junk folder (High).

2. Click Delete and then click Confirm.

The rule may take a few seconds to be deleted.

1. Select Send Office 365 spam emails to Junk folder (Low).

2. Click Delete and then click Confirm.

The rule may take a few seconds to be deleted.

1. Select Perception Point Spam Rule.

2. Click Delete and then click Confirm.

The rule may take a few seconds to be deleted.

Step 4: Deleting the connectors

Open the Microsoft Exchange admin center and then click Mail flow > Connectors.

[https://admin.exchange.microsoft.com/#/connectors]

1. Select Disable IP Throttling on Perception Point Connector.

2. Click Delete and then click Confirm.

The connector may take a few seconds to be deleted.

1. Select Perception Point Scanning.

2. Click Delete and then click Confirm.

The connector may take a few seconds to be deleted.

Step 5: Disabling the remediation app

This step disables the Perception Point remediation app. For details on the remediation app, see "Remediation App" on page 729.

1. In Perception Point X-Ray - in the left navigation menu, select Account > Channels.

2. Under Enabled Channels, locate Email Service > Microsoft 365, and then click Deactivate on the right.

Step 6: Deleting verified domains [Optional]

This step is optional. If you want to delete the verified domains, contact Perception Point Support [support@perception-point.io]. They will delete the verified domains.

You can include the text template below in your email:

Off-boarding Microsoft 365 [Inline] - using a script

About off-boarding a Microsoft 365 [inline] integration - using a script

This page describes how to use a PowerShell script to off-board [offboard] a Microsoft 365 integration with Perception Point X-Ray. The required script is maintained and provided by Perception Point. You are not required to make any changes to the script. When the script runs, it will:

• Remove the Perception Point IP addresses from the allow list

• Delete the redirect rules and spam rules

• Delete the connectors

• For details on how to manually off-board a Microsoft 365 Inline integration with Perception Point X-Ray, see "Off-boarding Microsoft 365 [Inline]" on page 832.

• For details about how to off-board a Microsoft 365 API integration with Perception Point X-Ray, see "Off-boarding Microsoft 365 [API]" on page 838.

Procedure: Off-boarding a Microsoft 365 [inline] integration - using a script

To use a script to off-board a Microsoft 365 [Inline] integration with Perception Point X-Ray:

Copy [or download] and run this entire PowerShell script [Offboarding.ps1].

Note: While the script runs, you'll be required to provide some input, such as: Your Exchange admin user email for Microsoft 365 The recipient domain [for example, yourdomain.com] The locale [environment] of your organization What is the environment of your organization In Perception Point X-Ray, go to Account > Preferences. The Environment of your organization will appear under General > Info: US, EU, or AU.

Disable the remediation app

This step disables the Perception Point remediation app. For details on the remediation app, see "Remediation App" on page 729.

1. In Perception Point X-Ray - in the left navigation menu, select Account > Channels.

2. Under Enabled Channels, locate Email Service > Microsoft 365, and then click Deactivate on the right.

Delete verified domains

This step is optional.

Contact Perception Point Support [support@perception-point.io]. They will delete the verified domains.

Off-boarding Microsoft 365 [API]

Follow the procedure below to off-board a Microsoft 365 API integration with Perception Point X-Ray.

For details about how to off-board a Microsoft 365 Inline integration with Perception Point X-Ray, see "Off-boarding Microsoft 365 [Inline]" on page 832.

Off-boarding a Microsoft 365 API integration

Perform the procedure below to off-board [offboard] a Microsoft 365 API integration. The procedure will simultaneously off-board inbound, internal, and outbound scanning.

To off-board a Microsoft 365 API integration:

1. In the Perception Point X-Ray banner, use the organization selector to select the required organization.

2. In the left navigation menu, select Account > Channels.

3. Under Enabled Channels, locate Email Service > Microsoft 365, and then click Deactivate on the right.

Press "Ctrl+F5" to refresh the page.

Make sure that the integration status is now Inactive.

Off-boarding Google Workspace integrations

This page includes:

About off-boarding Google Workspace integrations

Follow the steps below to off-board [offboard] a Google Workspace integration with Perception Point X-Ray.

The first four steps are performed in the Google Admin console, and the last step is performed in Perception Point X-Ray.

Step 1: Delete the API access

This step removes the Perception Point X-Ray API access to data in Google services.

1. Sign-in to the Google Admin console at admin.google.com.

2. In the Google Admin console, go to Security > Access and data control > API controls, and then scroll down to Data wide delegation, and click "Manage domain wide delegation"

[Click here: https://admin.google.com/u/3/ac/owl/domainwidedelegation]

Delete the Perception Point API client.

Step 2: Delete the content compliance rule

This step deletes the content compliance rule that sends the email to Perception Point X-Ray.

In the Google Admin console, go to Apps > Google Workspace > Gmail, and then scroll down to Compliance, and click Compliance.

[Click here: https://admin.google.com/u/1/ac/apps/gmail/compliance]

In the Content compliance section, delete the Perception Point Redirect Rule.

Step 3: Delete the Perception Point scanner host

This step deletes the Perception Point scanner host to which emails are routed.

In the Google Admin console, go to Apps > Google Workspace > Gmail, and then click Hosts.

[Click here: https://admin.google.com/u/1/ac/apps/gmail/hosts]

In the Hosts section, delete the Perception Point Scanner host.

Note: The Host value will vary, depending on your environment.

Step 4: Delete the Perception Point IP addresses

This step deletes the Perception Point IP addresses from the safelist.

In the Google Admin console, go to Apps > Google Workspace > Gmail, and then scroll down to Spam, Phishing and Malware - and click it Spam, Phishing and Malware.

[Click here: https://admin.google.com/u/1/ac/apps/gmail/spam]

1. In the Inbound gateway section, click the Edit icon - locate on the right side.

2. Delete the Perception Point X-Ray IP addresses from your inbound gateway. [The set of IP addresses to delete varies depending on the environment of your organization.]

What is the environment of your organization In Perception Point X-Ray, go to Account > Preferences. The Environment of your organization will appear under General > Info: US, EU, or AU.

1. In the Message Tagging section, clear the "Message is considered spam if the following header regexp matches" check box, and delete the X-PERCEPTION-POINT-SPAM: FAIL value.

2. Click Save.

Step 5: Disable the remediation app

This step disables the Perception Point remediation app. For details on the remediation app, see "Remediation App" on page 729.

1. In Perception Point X-Ray - in the left navigation menu, select Account > Channels.

2. Under Enabled Channels, locate Email Service > Google Workspace, and then click Deactivate on the right.

The Google Workspace integration has now been off-boarded.

Off-boarding "Other" integrations

Perform the procedure below to off-board [offboard] an "Other"/Exchange/MX integration.

To off-board an "Other"/Exchange/MX integration:

Remove the Perception Point MX record.

Remove the Perception Point IPs that were included in a safelist/allowlist.

Reference

https://docs.perception-point.io/WP/Content/PP/Off-boarding-Parent.htm

Acronis: https://docs.perception-point.io/acronis/Content/PP/Off-boarding-Parent.htm

Attachments (12)

att_5_for_26....png
6.11 KB

att_7_for_26....png
10.4 KB

att_12_for_2....png
20 KB

att_11_for_2....png
26.7 KB

att_8_for_26....png
13.1 KB

att_10_for_2....png
15.6 KB

att_3_for_26....png
1.8 KB

att_9_for_26....png
1.8 KB

att_1_for_26....png
1.8 KB

att_4_for_26....png
15.6 KB

att_6_for_26....png
6.56 KB

att_2_for_26....png
15.6 KB