Office 365 ATP Safe Links do not block URL in Word Online

%3CLINGO-SUB%20id%3D%22lingo-sub-1447389%22%20slang%3D%22en-US%22%3EOffice%20365%20ATP%20Safe%20Links%20do%20not%20block%20URL%20in%20Word%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1447389%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Community%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20trying%20to%20block%20a%20specific%20URL%20by%20creating%20a%20policy%20in%20ATP%20Safe%20Links.%20I%20have%20set%20the%20settings%20to%20this%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Mary_Yvette_0-1591586218896.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F197158iA6B95A2B35945706%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Mary_Yvette_0-1591586218896.png%22%20alt%3D%22Mary_Yvette_0-1591586218896.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EAnd%20I%20also%20created%20a%20policy%20for%20emails.%20And%20when%20I%20tried%20to%20click%20on%20the%20specific%20url%20on%20emails%20it%20was%20successfully%20blocked%20but%20when%20I%20clicked%20on%20URL%20in%20word%20online%20it%20was%20not%20blocked.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAccording%20to%20this%20article%20Office%20application%20on%20browser%20will%20be%20protected%20as%20well.%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Foffice-365-security%2Fhow-atp-safe-links-works%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Foffice-365-security%2Fhow-atp-safe-links-works%3Fview%3Do365-worldwide%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Mary_Yvette_1-1591586370484.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F197159i27798DCA5574BA2E%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Mary_Yvette_1-1591586370484.png%22%20alt%3D%22Mary_Yvette_1-1591586370484.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDid%20I%20missed%20anything%20on%20my%20configuration%3F%20Why%20is%20the%20URL%20not%20blocked%20in%20my%20Word%20Online%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1447389%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20ATP%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1447677%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20ATP%20Safe%20Links%20do%20not%20block%20URL%20in%20Word%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1447677%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F342175%22%20target%3D%22_blank%22%3E%40Mary_Yvette%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20do%20know%20that%20the%20ability%20to%20use%20Safe%20Links%20with%20Office%20Online%20was%20planned%20to%20be%20introduced%20in%20October%202019%20originally.%26nbsp%3B%20If%20you%20hover%20over%20the%20option%20today%20in%20the%20Security%20and%20Compliance%20Center%20though%20-%20interestingly%20it%20makes%20no%20reference%20to%20Office%20Online.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screenshot%202020-06-08%20at%2008.28.45.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F197187iA27A4F665C462B3A%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Screenshot%202020-06-08%20at%2008.28.45.png%22%20alt%3D%22Screenshot%202020-06-08%20at%2008.28.45.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EI%20would%20recommend%20opening%20a%20support%20ticket%20with%20Microsoft%20to%20see%20what%20they%20have%20to%20say%20on%20this%20issue.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1447863%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20ATP%20Safe%20Links%20do%20not%20block%20URL%20in%20Word%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1447863%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESharing%20the%20response%20I%20got%20from%20Microsoft%20Support.%20Feature%20is%20still%20in%20roll%20out.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Mary_Yvette_0-1591608563659.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F197216i3738AE692DEFC4BD%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Mary_Yvette_0-1591608563659.png%22%20alt%3D%22Mary_Yvette_0-1591608563659.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EDo%20you%20have%20any%20recommendations%20to%20protect%20URL%20in%20Office%20Online%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1448116%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20ATP%20Safe%20Links%20do%20not%20block%20URL%20in%20Word%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1448116%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F342175%22%20target%3D%22_blank%22%3E%40Mary_Yvette%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20would%20say%20that%20not%20a%20great%20deal%20can%20be%20done%20until%20such%20time%20that%20Microsoft%20roll%20this%20out.%26nbsp%3B%20What%20you%20could%20maybe%20do%20in%20the%20meantime%20is%20use%20Conditional%20Access%20to%20require%20your%20users%20to%20use%20an%20approved%20client%20app%20in%20the%20meantime%2C%20and%20not%20Office%20Online.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fazure%2Factive-directory%2Fconditional-access%2Fconcept-conditional-access-grant%23require-approved-client-app%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fazure%2Factive-directory%2Fconditional-access%2Fconcept-conditional-access-grant%23require-approved-client-app%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hi Community,

 

I am trying to block a specific URL by creating a policy in ATP Safe Links. I have set the settings to this:

Mary_Yvette_0-1591586218896.png

And I also created a policy for emails. And when I tried to click on the specific url on emails it was successfully blocked but when I clicked on URL in word online it was not blocked.

 

According to this article Office application on browser will be protected as well. https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/how-atp-safe-links-works...

Mary_Yvette_1-1591586370484.png

 

Did I missed anything on my configuration? Why is the URL not blocked in my Word Online?

 

Thank you!

 

 

3 Replies

@Mary_Yvette 

 

I do know that the ability to use Safe Links with Office Online was planned to be introduced in October 2019 originally.  If you hover over the option today in the Security and Compliance Center though - interestingly it makes no reference to Office Online.

Screenshot 2020-06-08 at 08.28.45.png

I would recommend opening a support ticket with Microsoft to see what they have to say on this issue.

@PeterRising 

 

Sharing the response I got from Microsoft Support. Feature is still in roll out.

Mary_Yvette_0-1591608563659.png

Do you have any recommendations to protect URL in Office Online?

@Mary_Yvette 

 

I would say that not a great deal can be done until such time that Microsoft roll this out.  What you could maybe do in the meantime is use Conditional Access to require your users to use an approved client app in the meantime, and not Office Online.

 

https://docs.microsoft.com/en-gb/azure/active-directory/conditional-access/concept-conditional-acces...