> Source: [sk164796](https://support.checkpoint.com/results/sk/sk164796)

# sk164796 - When Office 365 email is configured on-premises and in the cloud using domain based connectors, the emails are not delivered in Prevent mode 

| Property | Value |
|----------|-------|
| Solution ID | sk164796 |
| Date Created | 2020-01-24 |
| Last Modified | 2022-05-16 |
| Technical Level | Advanced |
| Products | Email Security |
| Versions | Cloud |

## Symptoms

- * Cloud Guard SaaS Policy for Office 365 Email is set to Prevent.
* Hybrid deployment (on-prem and cloud) using domain based connectors are used in Office 365.
* Emails are not delivered to user's mailboxes.

## Cause

By default, many hybrid setups are configured using domain-based connectors. These types of connectors conflict with Check Point Inline protection due to the inability to specify the priority of mail-routing.   

When having a domain-based connector along with Check Point Protect, incoming mail from outside the organization will match both the connector and our rule. This then leads to a loop between Check Point, Office 365, and Exchange On-Prem.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content