Endpoint Protection

Hello everyone. I am struggling to find information on how to setup an email server able to handle what SEPM needs. I have found a wealth of information regarding setting up the actual email notifications, but nothing on the actual email server settings/requirements. 

All our computers are Win10 and the Server is running Server 2016. 

Do you have to use whatever email server the admin email is using? Or can you use a different email server?

We use a gmail account already for other SMTP email alerts with no issue, but those credentials do not seem to work. All our work emails are through MS Exchange (as is the admin's email) - which also do not work. 

How can you tell if your email server is setup to recieve SMTP relays? How can I enable that if it's not set already?

For the sender address, does that need to be an actual existing email or can you makeup one? (Ex: SEPM@email.com)

I have logs of past failures. Reading through them helps me none. I doubt they would be helpful as I'm sure I'm not setting up our email server right.

Thanks for your time and help!

This is the main beef of my question:

Here's my 2 pence :)

1. The "Server Address" field under SEPM Properties -> Email Server, is for the MTA you want the SEPM to use, for handling the email notifications coming out of it.  Assuming both your SEPM and Exchange Server are on-prem, I'd expect Exchange to be the most efficient target.
2. The port depends on the Receive Connector on Exchange (again, assuming the on-prem Exchange is the chosen MTA).  Put in this field, whatever port Exchange's Receive Connector is configured to listen on
3. For the Sender email address, you can make one up.  Your example of SEPM@email.com would work fine, but I'd recommend making sure that the domain portion is of one that Exchange manages.
4. For the creds, this also depends on the Receive Connector on Exchange.  If the Receive Connector requires authentication, then you must enter the creds of a mailbox-enabled Windows account.  If the Receive Connector is set to accept Anonymous Connections, then you can leave the creds fields blank.
5. For the secure connection options, again this depends on the Receive Connector on Exchange.

All in all, it's really about seeing what Exchange is configured to accept, and then telling the SEPM (via SEPM Properties -> Email Server) how it should try to talk to Exchange.

Wow thanks for all the information!  I am still a bit confused though.

Our SEPM is installed on site on our terminal server but we use Office 2019. I don't know how to answer if we have an on site Exchange Server. I can login through the Office Portal and access our Exchange Admin Center. 

I also located a decent article about setting up Exchange for Inbound Mail from Symantec, but with 2019 I am seeing different things than what they show in the guide. I don't know if you can help or if I should switch to Microsoft help forums at this point?

https://support.symantec.com/us/en/article.howto126999.html

No probs!

I've not used Exch2019 yet, so cannot really comment (though I would've expected the Exch2016 steps to be most still applicable).  Yup, it's defintiely time to ask your mail admins and other MS resources for help on your Receive Connector