Thanks for the reply
@rickside - It makes sense what you're saying. The downside is that if we remove the policy, and leave the outbound traffic un-inspected, would that then mean that malicious links clicked from emails, that redirect to a malicious site, would then be allowed to load as normal?
We've had a few incidents recently, where unaware users, clicked links in email, and also a couple from website popups, that were blocked by ATP so the user was protected.
Just thinking if we turn it off, would these users (and there will be more) fall pray to these links?
Thanks again, mate.
