As an admin, you can integrate your email infrastructure in a few simple steps using the email configuration settings. You can enable and configure this functionality for your specific email environment, create compliance policies, and discover any existing unmanaged devices that may pose a security threat.

What can you do with the Workspace ONE Email Configuration settings page?

The path to the Workspace ONE Email settings page on the Workspace ONE UEM console is Groups & Settings > All Settings > Email > Configuration > Configure.

Use the Mobile Email Management (MEM) configuration settings to help you set up email for devices.

Note: MEM can only be configured at a parent organization group and cannot be overridden at a child organization group. One MEM configuration can be associated with a single or multiple Exchange ActiveSync (EAS) profiles.

Platform Tab

Settings Description
Deployment Model Select the deployment model.
  • Proxy
  • Direct
Email Type Select the email type for the deployment model.

If Proxy is the deployment model, select the email type. Choose from:

  • Exchange
  • Google
  • IBM Notes

If Direct is the deployment model, select the email type. Choose from:

  • Exchange
  • Google App with Direct API
  • Google App using Password Provisioning
Exchange Version Select the Exchange version.

For Proxy and Direct the deployment models, select either of the Exchange versions.

  • Exchange 2010
  • Exchange 2013
  • Exchange 2016
  • Exchange 2019
  • Exchange Office 365

Deployment Tab

Setting Description
Friendly Name Enter a friendly name for the SEG deployment. This name gets displayed on the MEM dashboard.
External URL and Port Enter the URL and port number for the incoming mail traffic to SEG.
Listener Port The SEG listens for device the communication through this port. The default port number is 443. If SSL is enabled for SEG, the SSL certificate is bound to this port.
Terminate SSL on SEG Enable this option if you want the SSL certificate to be sent from the SEG instead of offloading on a web application firewall. Upload a .pfx or .p12 certificate file including the root and intermediate certificates.
Upload Locally Select to upload the SSL certificate locally during installation.
SEG Server SSL Certificate Select Upload to add the certificate that binds to the listening port. The SSL certificate can be automatically installed instead of providing it locally. An SSL certificate in the .pfx format with a full certificate chain and private key included must be uploaded. See, the Upload the SSL Certificate after Renewal section in the Install the Secure Email Gateway (V2) topic to understand the methods to upload the SSL certificate after renewal.
Email Server URL and Port Enter the email server URL and port number in the form https://email server url:email server port. The SEG uses the following URL for proxying email requests to the email server. If using Exchange Online, enter the https://outlook.office365.com URL.
Ignore SSL Errors between SEG and email server Select Enable to ignore the Secure Socket Layer (SSL) certificate errors between the email server and the SEG server.
Ignore SSL Errors between SEG and AirWatch server Select Enable to ignore Secure Socket Layer (SSL) certificate errors between the Workspace ONE UEM server and the SEG server.

Establish a strong SSL trust between the Workspace ONE UEM and the SEG server using valid certificates.
Allow email flow if no policies are present on SEG Select Enable to allow the email traffic if SEG is unable to load the device policies from the Workspace ONE UEM API. By default, the SEG blocks all email requests if no policies are locally present on the SEG.
Note: A list of all the device records with the corresponding compliance status is provided. SEG does not calculate the compliance of a given device by itself, instead uses the data received from the Workspace ONE UEM console.
Enable Clustering Select Enable to enable clustering of multiple SEG servers.

When clustering is enabled, policy updates are distributed to all SEGs in the cluster. The SEGs communicate with each other through the SEG clustering port.
SEG Cluster Hosts Add the IPs or hostnames of each server in the SEG cluster.
SEG Cluster Distributed Cache Port Enter the port number for SEG to communicate to the distributed cache.
SEG Clustering Port Enter the port number for SEG to communicate to the other SEGs in the cluster. Enable clustering to have multiple SEG servers operating as a cluster.

Profiles Tab

Setting Description
Platform Enter the platform details like iOS, Windows and so on.
Mail Client Enter the mail client details.
Action Enter the action for creating a new profile or using an existing profile.
Profile Select any available profiles.

Summary Tab

The summary tab displays all the details email configuration information. Click Finish to complete the email configuration.