Explanation Box 1: The MRS proxy endpoint needs to be enabled on all mailbox servers. Box 2: SMTP is used to deliver email between on-premise users and Exchange Online users. This requires a third-party (public CA) certificate. Reference: https://docs.microsoft.com/en-us/Exchange/architecture/mailbox-servers/mrs-proxy-endpoint?view=exchserver-2