Forum Discussion
Phishing Filter - M365 ATP - false positives blocked or clear spam messages get into inbox.
Best thing to do here is open a support case and work with the engineer to find out why the message was not blocked.
We implemented all best practices (if suitable).
Now "internal mails" to external are filtered as SPAM (highest number 9).
How can internal mail be marked as spam? They are normal responses to mails.
These are filtered - but mails like these still coming through:
At this moment our Sophos UTM was a better filter than Office ATP - as we needed about 20% of the resources to manage it.
Is there any possibility to check how the SPAM score was calculated?
eg.
Score starts at 5
SPF ok -1 points
DKIM passed -1 Point
20 mails in the past 1h +1
= 4
?
- Not as far as I know
Such things probably aren't published in order to protect the inner workings of ATP
Yes i think i will do that. Because what Message Analyzer says - i would say 100% Junk. MS says -> straight to Inbox
