Multiple domains, dynamic distribution lists, and renaming groups

Multiple domains

In directory structures such as Active Directory Forests, or where multiple directory servers contain user data, you can use the multiple data source option. The Directory Synchronization Client searches the multiple sources and merges the data before sending it all to the cloud service.

More information about multiple data sources is provided in the configuration profile setup instructions (Step 2: Selecting your data source).

Synchronizing Dynamic Distribution Lists

If you have set up a Dynamic Distribution List in Microsoft Exchange, the default mail synchronization filter does not synchronize the email address of this list. If you want to include the address of a Dynamic Distribution List in your synchronization, change your mail synchronization filter to:

(|(&(mailnickname=*)(objectCategory=person)(objectClass=user
))(objectCategory=group)(objectClass=msExchDynamicDistributi
onList))

Note that (objectClass=msExchDynamicDistributionList) has been added into the “or” part of the filter.

Renaming groups in your directory

Once you have synchronized your groups with the cloud service, we recommend that you do not rename them in the directory. If you do rename a synchronized group, the new group name is automatically sent to the cloud service on the next synchronization. If you have set up any group-based black and white list settings for Forcepoint Email Security Cloud, however, you must manually reapply those settings to the new group name in the cloud portal.