Exchange 2016 onprmise

Question

Hello

I will implement Exchange 2019 onprmise and i want to use Microsoft defender for office 365 instead of buying hardware in my datacenter.

shall i configure Exchange hybrid?
Is it Microsoft defender for office 365 is enough?
is it included EOP?
What configuration required to receive all SMTP traffic on Microsoft defender for o365 and routed to my Exchange 2019 located in my datacenter?

Answer 1

No, you only need AADConnect if you want to sync identity objects to Azure. If you were in hybrid for example.

Answer 2

Defender and EOP are not the same. Defender builds on EOP and requires additional licensing
Refer to:
https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/overview?view=o365-worldwide#the-office-365-security-ladder-from-eop-to-microsoft-defender-for-office-365

You dont need hybrid however. Just a connector that routes mail to and from 365.
And setting your MX record to 365 so inbound mail goes there first!

https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/set-up-connectors-to-route-mail

Answer 3

Hi, in that article:
So if you have E3, you have EOP already with an option to upgrade.
E5 and you are good for both EOP and Defender Plan 2

Answer 4

Thank you Andy , but what is license required in my case?

Answer 5

Do I need to ADConnect ? or just route emails only with connector is enough as per your pervious reply?