Feb 28 2019 07:37 AM
hello
I want quarantine these has link email in content please help me define rule email ?
Best Regards,
Thanks
Feb 28 2019 11:01 PM
Mar 01 2019 05:46 AM
SolutionMar 01 2019 06:07 AM
but some case safe link not prevent as https://owanz4i5hc8rowduxwdmjqv.z13.web.core.windows.net/index.php
.it is face owa .
Mar 01 2019 06:16 AM
This is getting picked up in Edge and Windows Defender SmartScreen
However, it you want to quarantine those particular emails without ATP/or if they get through ATP then the alternative is to use a Transport Rule (either the sender/IP) to go to quarantine, or put them on the Blacklist.
Hope that helps
Best, Chris
Mar 01 2019 06:18 AM
Actually it protects, as you can see in the picture. And that's the beauty of ATP, it checks the URL each time a user clicks it.
Mar 01 2019 06:32 AM - edited Mar 01 2019 06:33 AM
But when i just receive email then safe link not prevent but after that then it prevent .
Thanks for all your support
Mar 01 2019 06:48 AM
Mar 01 2019 06:51 AM
I things will continue use safe link and monitor it ,thanks for your support .