Exchange on premises.Fully secured.No Microsoft 365.
Filtering, encryption, signatures, archive and Outlook add-ins for the Exchange in your own building. Internal mail included. From the cloud or in your own data centre.
Where in-house Exchange has gaps
Four points that affect almost every environment.
End of support for 2016 and 2019
Regular support ended on 14 October 2025. The last paid security updates run out in October 2026. The way forward is Exchange SE.
Add-on software is discontinued
On-premises signature and rules products have been retired, and vendors point to their cloud. Whoever stays in-house loses their tools.
Internal mail stays unprotected
Messages between two mailboxes on the same server never reach a gateway. They are neither encrypted nor traced.
Add-ins demand Microsoft 365
Most Outlook add-ins sign in through Entra ID. Mailboxes on your own Exchange are left out.
One gateway for the whole Exchange
Three building blocks, each usable on its own.
Gateway in front of Exchange
Inbound through MX, outbound through a send connector. Filtering, encryption, signatures and archive work server-side, for every client.
Two agents in-house
The Exchange agent routes internal mail through the gateway. The directory agent reads Active Directory and reports outbound only.
Add-ins without Microsoft 365
Five Outlook add-ins with a dedicated manifest for Exchange Server. Pairing runs through the manifest, nobody types a code.
SecureMail
Disclaimer
SecureFiles
Archive
AwarenessExchange stays where it is.
Conbool sits in front of it and next to it. Mailboxes, addresses and clients stay unchanged.
No rebuild of mailboxes
No inbound access to the directory
Internal mail under the same rules as external
Cloud or your own data centre
What Conbool does for your own Exchange
Six modules, one portal.
MailGuard before the inbox
Spam, phishing and malware are filtered out before delivery. The gateway rejects unknown recipients, even with Active Directory only.
SecureMail, internally too
S/MIME, PGP, PDF and portal by rule. With the Exchange agent also between two mailboxes in-house.
Disclaimer from AD
Name, job title, department and phone straight from the local directory. No Entra ID and no sync to the cloud.
Archive, tamper-proof
Capture through the gateway or a journal rule. Search right from Outlook.
SecureFiles from Outlook
Large files go out as a protected link, straight from the message.
Run it your way
From EU data centres or as an installation in your own data centre. Same platform, same portal.
Exchange on premises with and without Conbool
What Exchange brings on its own and what gets added.
With Conbool | Exchange alone | |
|---|---|---|
| Filtering before the inbox | MailGuard with quarantine | Basic filtering in Exchange |
| Encryption without client setup | S/MIME, PGP, PDF, portal | S/MIME per client |
| Encrypt internal mail | through the Exchange agent | only with a certificate per person |
| Outlook add-ins without Microsoft 365 | five add-ins | none |
| Tamper-proof archive | with immutability | retention in the mailbox |
Statements on Exchange based on Microsoft product documentation for Exchange Server SE.
Frequently asked questions
Does Conbool work with Exchange Server SE without Microsoft 365?
Does the MX record have to change?
What does the end of support for Exchange 2016 and 2019 mean?
Can Conbool run in our own data centre?
Is internal email protected?
Do the Outlook add-ins need Entra ID?
Is this GDPR compliant?
Related solutions
Encrypt internal email
Route mail between two mailboxes through the gateway.
Outlook add-ins for Exchange Server
Five add-ins without Microsoft 365 and without typing a code.
Email security without Entra ID
People, groups and addresses from local Active Directory.
Encryption for Exchange Server
S/MIME, PGP, PDF and portal centrally at the gateway.
Signatures for Exchange Server
Automatic signatures with fields from AD.
Secure your own Exchange
A demo on an Exchange SE environment with Active Directory, from connecting it to the first protected message.