Should I whitelist the e-securemail IPs, which ones?

Yes, you have to add our IP range (85.31.12.0/24) on the Office tenant. Please refer to the e-securemail IP whitelisting procedure e-securemail IP whitelisting procedure