How can I monitor email quarantine after provisioning Mailprotector?

We suggest you monitor your users' quarantine closely for the first two weeks.

How do I lock down my mail server to improve email security with Mailprotector?

we recommend that you restrict SMTP access to only allow from Mailprotector IP addresses.

Post-Provisioning Steps for Improving Security – Mailprotector Help Center

After verifying your domain to activate Mailprotector security, it is recommended to monitor user quarantines for two weeks to ensure legitimate emails are not missed, configure outbound security using Mailprotector's SafeSend features for enhanced compliance and encryption, and restrict your mail server to accept SMTP connections only from Mailprotector IP addresses once DNS propagation is complete to further strengthen your organization's email security.

Congratulations! Once you have verified the domain, you have essentially turned Mailprotector security on for your organization. We are now scanning and delivering the good email to your mail server.

Next Steps

We recommend the following next steps to further enhance the domain's security.

1.Monitor Quarantine. We suggest you monitor your users' quarantine closely for the first two weeks. Mailprotector is tuned to work "out of the box," but we encourage you to verify that email that might be considered 'gray spam' (junk for some, needed for others) is not missing from the inbox. Please see Managing User Quarantine for more information.
2.Configure Outbound Security through Mailprotector. Basic outbound security is provided as a component of CloudFilter email security. SafeSend offers enhanced outbound functionality, including compliance footers, message rule controls, outbound quarantines, and enforced email encryption (with Bracket encryption services). The provisioning for SafeSend basic and enhanced outbound security is the same. More information is available in the article SafeSend Outbound Scanning Configuration.
3.Lock down your mail server to only accept from Mailprotector. Once you have given DNS time to propagate completely, meaning no further MX record queries will resolve directly to your mail server, we recommend that you restrict SMTP access to only allow from Mailprotector IP addresses. This restriction can be entered at the firewall and/or the mail server itself.
4.Check out your Mailprotector management console for a summary view of stats. You will find a summary view for your partner account as well as the ability to drill-down to domain specific stats. The Overview page will display the last 7 days summary (Figure 1) of both inbound and outbound email. The Message statistics are found below the Status and Products on the Overview page.

Fig. 1

1.Check the Status for the domain and groups. The Status will display on the Overview page/tab of your Domain and Group pages. This information will give you a summary and live check of your current MX records, mail flow from Mailprotector delivery IP addresses, and SPF record state if you are relaying outbound email through Mailprotector. If the status is green (Figure 2), then all three tests are good. If red (Figure 3), one or more items need attention. Grey status boxes are lacking enough data to provide information. Just click on the box for detail.

Fig. 2