Changes to Email Security.cloud infrastructure in Asia Pacific region
Last Updated May 09, 2017
What is happening?
As Symantec strives to enhance and improve the stability of its Email Security.cloud service, we will be migrating all processing of messages from Hong Kong and Sydney data centers to data centers in the US. Currently over 93% of our Asia Pacific customer base are processing their email in the US infrastructure. For the 7% of customers being migrated to US infrastructure we expect no additional delivery latency and with processing time being the biggest factor with end-to-end delivery latency, there is the possibility that latency will decrease due to the fact that there is newer, faster hardware running in the US infrastructure. Another benefit for these customers will be a decrease in the amount of time it takes for configuration changes to propagate.
Is there anything customers need to do?
Customers who have setup the service correctly according to technical requirements (have inbound mx records and outbound smarthosts pointing to the appropriate Symantec hosts and have mail servers configured to accept email from the full range of IP addresses used by the Email Security.cloud service) will not be required to make any changes and the migration will be completely transparent. Symantec has proactively been communicating and working with customers to rectify issues where it has recognized setting misconfigurations which may impact mail delivery.
How can I ensure mail routing is set up correctly?
Domains using the Asia Pacific infrastructure should be configured as follows:
Depending on the cluster you are provisioned on, your mx records should be pointing to one of the followings hosts and backup hosts:
cluster1.ap.messagelabs.com and cluster1a.ap.messagelabs.com
cluster2.ap.messagelabs.com and cluster2a.ap.messagelabs.com
cluster1.hk.messagelabs.com and cluster1a.hk.messagelabs.com
cluster2.hk.messagelabs.com and cluster2a.hk.messagelabs.com
Again, depending on which cluster you are provisioned on, your outbound email should be smarthosted to one of the followings hosts:
If I restrict SMTP traffic from my internet gateways which IP address ranges should I accept SMTP traffic from?
Your SMTP Gateways are required to allow SMTP traffic from Symantec IP ranges listed in Table 3-1 found in the document below: