This post is for the attention of all customers of our inbound email feature, and specifically for those customers who have connected it with Microsoft Office 365 online email service.
We currently use the EWS API to connect to O365 online but Microsoft will be removing support for this API next October 2026. This means that any products trying to connect to O365 via this API will fail to do so from that date onwards.
https://techcommunity.microsoft.com/blog/exchange/retirement-of-exchange-web-services-in-exchange-online/3924440?after=MjUuOHwyLjF8aXwxMHwxMzI6MHxpbnQsNDQ0MjcwNSw0MTcyMjE3
To address this, we will be adding support for the recommended MS-Graph API to our inbound email feature to ensure our customers can continue to avail of this service. This work is currently targeted to Q2 2026.
Unlike other EOL scenarios where customers can choose to upgrade after the time of EOL has passed, e.g. RHEL7, with this EOL, customers will have to upgrade to a product version that supports MS-Graph for email before the October date otherwise they will lose access to that email service.
Looking at support tickets we can see customers are using inbound email on a variety of older versions and this post is intended to give notice that customers should start planning the required upgrades to ensure there is no disruption to their processes involving email.
Please take time to review product documentation for the various V51 versions, and note the recommended upgrade process requires that each major upgrade be validated before proceeding to the next version.
https://www.ibm.com/docs/en/sqsp/51.0.0?topic=release-notes
Reviewing the "whats new" content will also highlight the new features that can be availed of with these upgrades.
The following support tech note may be a useful reference for upgrade planning
https://www.ibm.com/support/pages/ibm-qradar-soar-upgrade-checklist
With particular attention to this section;
With the recently adopted VRMF numbering scheme, you still need to upgrade sequentially, updating the "Modification" value as follows
-
50.x -> 51.0.0.x -> 51.0.1.x -> 51.0.2.x -> 51.0.3.x
-
The third number, or the "Modification" number, is determined to be a "major release" which replaces the previous numbering convention of 47.x -> 48.x -> 49.x
-
You are advised to install the latest point release, indicated by ".x"
For customers on versions older than V51, documentation will not be available online but see the following support tech note for how to access documentation for older versions
https://www.ibm.com/support/pages/qradar-soar-how-do-i-get-access-documentation-unsupported-versions
If you have any concerns or questions on this topic please contact your IBM reps or the PM team and we will be happy to discuss.
------------------------------
Martin Feeney
Product Manager, IBM Security QRadar SOAR
martin.feeney@ie.ibm.com------------------------------