add to whitelist or safe senders from quarantine

[Skipster311-1]

Hello all

I see its possible to block a sender from within the quarantine. Is it also possible to whitelist or add a sender to "safe senders" list from within the quarantine ? 

[#2 · Accepted solution]

Only from the admin quarantine, IIRC. Which in turn adds it to the org-wide allow list.

[#3]

@Vasil Michev 

I'm currently logged into quarantine as a global admin. When i select a particular email i dont see the option to white list the email

[#4]

Should be under Release email.

[#5]

so "release email" releases the email from the quarantine and add's the email to the safe senders list?

[#6]

I found it. when you release the email you have the option to add the sender to the safe senders list. Thanks for the assist

[#7]

The option is not there anymore. do you still find that option?

[#8]

I only see the option to Allow for up to 30 days. What if I want to permanently allow the sender?

[#9]

@JeffRyer I would like to know this too, it shows only 30 days, I need it permanent.

[#10]

@ppci19   @Vasil Michev  ( added 2/12/24 )   no reply for 6 months.

  I have the need to email back and forth with my personal calendars and emails are sent back and forth.

We should have a way to white list outside of the for the entire company ?  But, if so, can I white list my emails for the entire company  ?

How ?

Regards,

Chris 

[#11]

Has anybody found out how to allow sender for more than 30 days please?

[#12]

@Vasil MichevThis option is not available at all for me - only 'Report message as having no threats".  My company sends out (via external mail service) every day, but every day I see this message for the same email address I have released a hundred times?

[#13]

It would be nice if anyone could reply to this.

[#14]

@Skipster311-1 

As far as I know, Microsoft has removed the option to manually add specific emails/domains to the Tenant Allow / Block list.

You can still manually block domains, but allow has to go through the submission process, where you submit the email/domain etc. with the reasoning for why it should not be blocked.

Reference: Allow or block email using the Tenant Allow/Block List - Microsoft Defender for Office 365 | Microso...

[#15]

I have some Allow actions added under the 30-day rule last August that have been automatically renewing steadily since then. I agree that that is hardly a secure way to proceed, but it appears to be working for the domains in question.

I am a strong believer in at least trying to understand and if possible solve the problem rather than putting a policy plaster on the problem. If it seems unlikely that the sender would reform even if the problem is carefully and courteously explained to them, you can still add allowed sender and allowed domain entries to the anti-spam and anti-phishing policies. That will however cost Secure Score as those lists should ideally be empty, and such an action should only be taken with an understanding of the underlying sender problem and concomitant risks. Microsoft can only offer a general solution. Only you can balance the benefits against the risks to your organisation.