This article applies to:

  • MailMarshal (SEG) Cloud (US instance)
  • For other instances, see article 21149 (Australia instance) and article 21148 (EU instance)


  • What are the addresses to send mail through MailMarshal Cloud (US instance)?
  • What are the URLs for MailMarshal Cloud consoles?

To open the MailMarshal Console navigate to https://console.us.mailmarshal.cloud

  • Customers use this Console to manage email and settings.

In This Article:

This article provides the technical details for connections to and from the MailMarshal (SEG) Cloud service for the US instance.

Customers provisioned before June 2019 generally are provisioned in the US instance.

Inbound MX Record

To have incoming mail delivered through MailMarshal Cloud, set your MX record as follows:

MX Record Priority
mx.us.mailmarshal.cloud 10
  • You (the customer) or your DNS provider must make this setting.
  • Make sure you only have one MX record. If you have more than one record then email might bypass MailMarshal Cloud.

Address for outbound mail

To send outbound mail through MailMarshal Cloud, use the following server name. 

Server Name
  • You must allow connections on port 25 from your local email server (or cloud email provider) to this server name.
  • This server name can resolve to an IP address in the below ranges. Caution: outbound and inbound ranges differ.
Address Range
  • Ensure that your internal email system can send messages to these IP ranges. 

IP Address Ranges to allow inbound

Inbound messages from MailMarshal Cloud to your servers may originate from addresses in the ranges noted.  Caution: outbound and inbound ranges differ.

Address Range
  • Ensure that your mailbox server or cloud service always accepts messages from these IP ranges. You might need to configure exclusions for Connection Filtering and IP Reputation services so the MailMarshal Cloud IP addresses are never blocked by these services. For help with email system setup, see documents found on the MailMarshal Cloud documentation page.

SPF Record Include Text

To include MailMarshal Cloud in a SPF record for your email domain, use this text:

For example:
v=spf1 include:spf.us.mailmarshal.cloud -all

SPF Record Include Text - Office365 Customers

If your email service is hosted on Office365, also include the Office365 SPF record:
include:spf.us.mailmarshal.cloud include:spf.protection.outlook.com

Console URL

Customers use the following URL to connect to the MailMarshal Console for email management and rule management:

Reseller access

Resellers use the following URL to connect to the MailMarshal administration interface:


The "MailMarshal.Cloud" names are preferred going forward. Trustwave recommends that customers update their DNS and settings, replacing any previously configured values. However, existing previously notified values continue to work.

On 1 September 2022, the default URL domain for the MailMarshal Console will be updated to "Console.US.MailMarshal.Cloud" and all web requests will be redirected to this domain. Links and bookmarks to previous domains will continue to work. Email flow is not affected. 

  • For customers using the SQM Single Sign On feature, on 1 September 2022, the SSO URLs must be changed to refer to the "Console.US.MailMarshal.Cloud" domain. Affected customers have been notified.

Trustwave MailMarshal Cloud KB article Q21095

Last Modified: August 21, 2022

 Turn On Turn Off Highlight