---
title: "📋 FTAPI Gateway: Example Setup Scenario A"
url: "https://support.ftapi.com/en/article/beispieleinrichtung-szenario-a"
language: "en"
last_updated: "2026-06-22T07:10:36.090Z"
---

# 📋 FTAPI Gateway: Example Setup Scenario A

This guide describes the configuration for Scenario A, where a mail server is used with an upstream FTAPI Gateway.

#### **Scenario A: Mail server (Cloud or On-Prem) with upstream Gateway**

**Outbound**: The mail server forwards emails to FTAPI S/MIME, where they are signed/encrypted. Afterward, they are forwarded to the Security Gateway and sent from there to the internet.

**Inbound**: Emails arrive from the internet at the Security Gateway, are checked there, and subsequently forwarded to FTAPI S/MIME. After decryption, FTAPI forwards the emails to the mail server.

## Exchange (onpremise)  
 

### Send connector (Exchange -> Gateway)

Exchange Admin Center -> Mail flow 

-   Delivery 
    -   "Add smart host"
        -   IS: <*FQDN of the gateway*\>
        -   SHOULD: <*FQDN of the FTAPI Gateway*\>

![](https://cdn-assets.productfruits.com/c747ff94-a4fd-4be8-a0a5-1391c5c20e53)

### Receive connector (Gateway -> Exchange)

*(Example SOPHOS XGS)*

\-> Protect -> Email -> "Policies & Exceptions"

-   Policies (to Exchange)
    -   "Route to"
    -   Host list
        -   IS: <*FQDN of the Exchange server*\>
        -   SHOULD: <*FQDN of the FTAPI Gateway*\>

![](https://cdn-assets.productfruits.com/df41fc7d-8a19-467d-82cc-4e975e493c7c)

## Exchange Online  
 

### "Add a connector" -> outbound  
 

-   Connection from 
    -   *Office365*
-   Connection to
    -   *Your organization's email server*
-   *Name*
    -   *e.g.: "FTAPI S/MIME Outbound Connector" -> activate*  
        *![](https://cdn-assets.productfruits.com/f481dc78-0d7f-4eb9-8f21-b32f4242bd4f)*
-   Usage
    -   *Only when I have a transport rule set up*  
        *![](https://cdn-assets.productfruits.com/c8639afb-c7b8-42f4-9dd3-7488cf98951e)*
-   Routing
    -   *FQDN of the FTAPI Gateway, e.g. "**smime-customer.ftapi.com**"*  
        *![](https://cdn-assets.productfruits.com/608fcef3-3c68-442b-86f4-3ed64325adc4)*
-   Security restrictions
    -   *Issued by a trusted certificate authority (CA)*  
        *![](https://cdn-assets.productfruits.com/9c74fa1f-ea65-4cde-a967-a7f9bdf86dd3)*
-   Validate and create connector  
    ![](https://cdn-assets.productfruits.com/b8ede381-4a2d-4c68-a101-7289f445c2eb)

### "Add a connector" -> inbound

-   Connection from 
    -   *Your organization's email server*
-   Connection to
    -   *Office365*
-   *Name*
    -   *e.g.: "FTAPI S/MIME Inbound Connector" -> activate*  
        *![](https://cdn-assets.productfruits.com/31755028-5c95-4e04-b020-2d8dab3e6189)*
-   Usage
    -   *Only when I have a transport rule set up*  
        *![](https://cdn-assets.productfruits.com/78fbddf5-5e03-487f-8894-097e44b6491c)*
-   Routing
    -   *FQDN of the FTAPI Gateway, e.g. "**smime-customer.ftapi.com**"*  
        *![](https://cdn-assets.productfruits.com/e9df8eb3-6229-45e4-83c8-992acc917b6d)*
-   Security restrictions
    -   *Issued by a trusted certificate authority (CA)*  
        *![](https://cdn-assets.productfruits.com/0f25c53e-c359-46d8-81a3-1c5260a696b4)*
-   Validate and create connector  
    ![](https://cdn-assets.productfruits.com/82eb4168-5bf5-4172-98cd-d4fe3da9db27)

## Rules

### Inbound

"Add a rule"

-   Name e.g. "S/MIME inbound"
-   Apply this rule if 
    -   The sender is *external/internal*
    -   *The sender is "Outside this organization"*
-   and
    -   *The recipient is external/internal*
    -   *The recipient is "Inside this organization"*
-   Do the following:
    -   Redirect the message to -> the following connector
        -   *<FTAPI S/MIME Inbound Connector>*
-   Except if
    -   The message headers… include any of these words
    -   *Enter text: "Received"*
    -   *Enter words: <FQDN of the FTAPI Gateway>*

![](https://cdn-assets.productfruits.com/ef1ad4d3-795e-4b82-9797-c70a9d8ac106)

### Outbound

"Add a rule"

-   Name e.g. "S/MIME outbound"
-   Apply this rule if 
    -   The sender is *external/internal*
    -   *The sender is "Inside this organization"*
-   and
    -   *The recipient is external/internal*
    -   *The recipient is "Outside this organization"*
-   Do the following:
    -   Redirect the message to -> the following connector
        -   *<FTAPI S/MIME Outbound Connector>*
-   Except if
    -   The message headers… include any of these words
    -   *Enter text: "Received"*
    -   *Enter words: <FQDN of the FTAPI Gateway>*

![](https://cdn-assets.productfruits.com/7939dee9-8d8c-47d0-b049-a6c3986e5be9)