Event banner
Microsoft Defender for Office 365 Ask Microsoft Anything
Event details
This March we announced the public preview of collaboration security for Microsoft Teams. We are bringing the full feature set that customers use to protect their email environments across prevention, detection, and response to Microsoft Teams.
We are excited to bring collaboration security into the XDR SOC experience in Microsoft 365 Defender and help defenders protect their Microsoft Teams environment from emerging threats with end-to-end prevention, detection, and protection capabilities - so that organizations can continue to collaborate with confidence.
An AMA is a live text-based online event similar to a “YamJam” on Yammer or an “Ask Me Anything” on Reddit. This AMA gives you the opportunity to connect with Microsoft product experts who will be on hand to answer your questions and listen to feedback.
Feel free to post your questions about collaboration security for Microsoft Teams anytime in the comments before the event starts, although the team will only be answering questions during the live hour!
57 Comments
- faizaldevCopper ContributorHello Admin, How to Joint / Link Microsoft Teams, thanks.
- Trevor_Rusher
Community Manager
Hi Faizal, for any questions about Microsoft Teams, you can visit the Tech Community Hub here: https://techcommunity.microsoft.com/t5/microsoft-teams/ct-p/MicrosoftTeams. This is an AMA about Defender for Office 365 so we will only be answering questions related to that particular product.
- CRL55Copper ContributorI think maybe he was asking about a Live Teams Link for the Event? As I was wondering the same......
- VNJoeIron ContributorThere IS not Teams. This is it...
- Steven-HBrass Contributor
Are there any plans to allow security operators to take bulk actions on actions pending approval without having to navigate outside of the incident? Right now, you can take action on one item at a time from the incident but if you have, say, 100 pending actions then you have to take note of what was included in the incident, then navigate out to the action center then find the items associated with the incident and take action on it.
- johnengels
Microsoft
Steven - you should be able to multi-select items in the incident's evidence list and approve them. It'll give you fewer options than if you select them one by one, but should give you approve/reject.
- Trevor_Rusher
Community Manager
Welcome to the Microsoft Defender for Office 365 AMA! This live hour gives you the opportunity to ask questions directly to the Microsoft team. Please post any questions in a separate, new comment thread on this event. Thanks for coming! - sedricbeasleyCopper ContributorThe license in E5 covers Windows devices that are considered workstations but; what about servers. I was told that the license does not cover servers and how would you protect your datacenter if users are using a server directly.
- BrookeLynnWeenig
Microsoft
We are checking with our licensing team now to give you the right answer!
- Trevor_Rusher
Community Manager
Hey all! I'm excited to share this upcoming AMA with the Defender for Office 365 team! Remember to please ask your questions down here in a new comment thread. Just a reminder- you can ask them at any time leading up to or during the event but the team won't be answering questions until the live hour. Thanks! - RuffyMCopper ContributorWe recently presented Defender for Office 365 to a customer in evaluation mode. After the configuration was completed, we couldn't get back to the routing settings although in the evaluation tour in step 2 it's said: "Update your routing setting and users, groups and domains included, and other capabilities." It seems that it was possible in earlier versions. Did that change and will it be possible again in the next version?
- RuffyMCopper Contributor
Hi John, I refer to https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/try-microsoft-defender-for-office-365?view=o365-worldwide#set-up-an-evaluation-or-trial-in-audit-mode, topic 4 'In the Help us understand your mail flow dialog, configure the following options:'
After the set up was completed we couldn't edit the mail flow settings via 'Manage evaluation settings'. - stevenp1960-2009Copper ContributorHi Ralf, I checked you out on LinkedIn but can't connect w/ you. Please keep in touch w/ me best you can. Ty, https://www.linkedin.com/in/stevenpalange/
- johnengels
Microsoft
Hi Ralf - when you say 'routing' are you meaning call routing, email routing, etc.? Need a bit more info to figure out where to help get the question answered.
- stevenp1960-2009Copper Contributor; ) This is great! FYI, most of my over 500 clients will NOT NOT NOT move their endpoint security to Defender or MS because they won't get any support. They can't get presales support or post-sales technical support. I look forward to discussing this and other issues. In almost 30 years of being a reseller and MSSP for over 500 companies, I have yet to meet and speak to an MS employee.
- rsbedardCopper ContributorFor those of you who might be interested, we launched Indominus Managed Security in January to address this very problem. We offer a managed instance of Defender for endpoint/for business with 7/24 support and we automated most of the on-boarding. We also optionally offer managed vulnerabilities and updates for Windows devices. We target small and medium businesses who otherwise would not be able to hire/retain cybersecurity professionals. Let me know if we can help.
- Rick_GregoryOccasional ReaderDo you have a reference link to this René-Sylvain?
- Audio MaverickCopper ContributorI fell similarly. The model of having to be aligned with a solution provider instead of an inhouse team is common across the modern business spectrum. But, it leaves one to be upfronted with additional costs for service whenever anything goes awry. Service is not inherently bundled with the product, and costs vary with the provider. Everything is going to the "as a service" model. For me, that means added costs and hits to the bottom line. The question is if it is worth the cost to run Defender over the competition. Microsoft still has a at least a perceived view that their defense solution is not as good as most other premium services in this category, whether or not it is founded. I had a client fall victim to the recent 3CX Trojan issue . They were running Trend Micro Apex One in house on most of their systems, and it didn't have any idea they were collecting multiple malware instances. The few units on the built-in Windows Defender caught the downloads after the initial infection, which is better than most AV applications faired.
- serge_gomezIron Contributoryes so many
- serge_gomezIron Contributorhi there
- johnengels
Microsoft
Hello Serge!