Automatic Mode Onboarding - Microsoft 365 Footprint

While onboarding, if you choose to activate Office 365 Mail using the Automatic mode of operation, Harmony Email & Collaboration adds the Check Point Cloud Security Platform - Emails V2 enterprise application to your Microsoft Azure and makes these changes to your Microsoft 365 environment.

• Mail Flow Rules

• Connectors

• Connection Filters

• Journal Rules

• Groups

• Distribution Lists

• Spoofed Senders Allow List

• Trusted ARC Sealers

• Reported Phishing Emails

• Delegated Token

• PowerShell Scripts

Approving User

Check Point uses the user who approves the Office 365 Mail application (see Activating Office 365 Mail) to keep the delegation token fresh.

This token ensures that, if you disconnect Check Point from your Office 365 Mail application, the system properly removes all related components from your Azure environment.

As a result, you may observe multiple login attempts by this user from Check Point IP addresses, along with token refresh activity.