microsoft office 365 anti phishing setup

Microsoft office 365 anti phishing setup series#

To learn more about the current threat landscape, please check out our annual security intelligence report, the Microsoft Digital Defense Report.Įnsuring that users cannot interact with malicious emailsĪs part of our secure by default focus, we’ve also taken additional steps to eliminate the risk of email borne threats. This feels like a critical step, given how dangerous and voluminous phishing messages have become. Our data also indicates that the false positive rate (good messages marked as bad) for high confidence phishing messages is extremely low, adding to our conviction about this approach.

We already apply this approach with malware messages and now we are extending it to messages with high confidence phish verdicts. That means these legacy overrides are no longer honored for email messages we believe are malicious. As a security service, we believe it’s imperative that we act on your behalf to prevent your users from being compromised. We have determined that legacy overrides such as allowed sender and allowed domain lists in anti-spam policies and Safe Senders in Outlook tend to be too broad and cause more harm than good. To combat this, we here at Microsoft believe it’s critical to keep our customers “secure by default”. As a result of these aging and overly permissive overrides, we get poorly protected pockets with the organization and enable malicious emails to be delivered to end users. As we covered in the first blog, legacy overrides are tenant level or user level configuration that instruct Office 365 to deliver mail even when the system has determined that the message is suspicious or contains malicious content. One of the challenges we are addressing is the legacy override problem.

Secure by Default: Tackling the Legacy Override Problem Note: This blog has been updated to reflect changes to release dates. In this blog, we’ll take a closer look at additional capabilities we are enabling in the product as we continue forward on our journey to block malicious emails from being delivered to end users. In the previous blog in this series, we described how we have made it easier for customers to understand configurations gaps in their environment with recently launched features including Preset Security Policies, Configuration Analyzer, and Override Alerts.

Microsoft office 365 anti phishing setup series#

This blog is part two of a three-part series detailing the journey we’re on to simplify the configuration of threat protection capabilities in Office 365 to enable best-in class protection for our customers.