Cloud SEG

Overview

The Check Point Email Cloud SEG (Secure Email Gateway) solution provides inbound email protection by placing Cloud SEG in the customer's mail flow as the first hop for incoming messages. The customer updates their MX record to route inbound email to Check Point Email Security, where messages are scanned, and security verdicts are applied before delivery.

After inspection, Cloud SEG routes legitimate messages to the customer's mail environment, which can be:

  • Microsoft

  • On‐premises Microsoft Exchange Servers

  • Custom email servers

Check Point uses user synchronization to maintain recipient and user information for routing, policy enforcement, and protection.

Cloud SEG enables to support customers that require SEG-style mail routing, including hybrid environments, centralized mail-flow configurations, and non-Microsoft architectures.

Note:

  • To enable the Cloud SEG feature, contact Check Point Support.

  • Cloud SEG currently supports Inbound email traffic only.

  • The maximum message size is 35 MB. If you require a different maximum message size, contact Check Point Support.

Supported Deployment Scenarios

Cloud SEG provides advanced email security for customers who cannot deploy a purely API‐based email security solution.

Common reasons customers may require the SEG deployment model include:

  • Support for currently unsupported architectures, including:

    • Classic hybrid deployments

    • Centralized mail‐flow environments

    • Fully on‐premises environments

  • Support for additional email vendors beyond the currently supported API integrations.

  • Customer preference to maintain an existing SEG architecture.

Prerequisites

During Cloud SEG onboarding, select the SEG onboarding flow and do not install the Microsoft application separately.

Cloud SEG Onboarding Workflow

The Cloud SEG onboarding process includes the following steps:

  1. Accessing the Cloud SEG Configuration

  2. Configuring Cloud SEG for a Domain

    1. Configuring Email Servers and Users

    2. Configuring DNS Records

    3. Activating Inbound Email Traffic

Accessing the Cloud SEG Configuration

To access the Cloud SEG configuration:

  1. Access the Email Security Administrator Portal.

  2. From the left navigation panel, go to Security Settings > SEG & Relay > Domains.