Email Deployment Types

Workspace ONE UEM offers two types of deployment models with which you can protect and manage your email infrastructure. Using these deployment models with the email policies you define in the UEM console, you can effectively manage your mobile devices by allowing or blocking the email access.

In the proxy model, a separate server called the SEG proxy server is placed between the Workspace ONE server and the corporate email server. This proxy server filters all the requests from the devices to the email server and relays the traffic only from the approved devices. This way the corporate email server is protected as it does not directly communicate with the mobile devices.

The SEG Proxy deployment model can be configured on two platforms: Classic and V2. Though the functionality of both the platforms are the same, V2 platform assures improved performance over the Classic platform.

In the direct model approach, there is no proxy server involved and Workspace ONE UEM communicates directly with the email servers. The absence of proxy server simplifies the installation and configuration steps in this model.

The table provides the list of email servers that are best compatible with the two deployment models.

Deployment Model Configuration Mode Mail Infrastructure

Proxy Model

Secure Email Gateway - Classic Platform

Microsoft Exchange 2003/2007/2010/2013/2016

Exchange Office 365

IBM Domino w/ Lotus Notes

Novell GroupWise (with EAS)


Secure Email Gateway - V2 Platform

Microsoft Exchange 2010/2013/2016

Exchange Office 365

Direct Model

PowerShell Model

Microsoft Exchange 2010/2013/2016

Microsoft Office 365

Gmail Model



Workspace ONE UEM only supports the versions of third-party email servers currently supported by the email server provider. When the provider deprecates a server version, Workspace ONE UEM no longer supports integration with that version.