SOLVED

Exchange online antispam feature

%3CLINGO-SUB%20id%3D%22lingo-sub-1456323%22%20slang%3D%22en-US%22%3EExchange%20online%20antispam%20feature%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1456323%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%20our%20customer%20has%20a%20question%20about%20antispam%2Fphishing%20protection.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20example%20lets%20say%20that%20an%20o365%20customer%20is%20under%20mass%20phishing%20attack%20from%20an%20source%2C%20that%20is%20yet%20to%20be%20recognized%20by%20Microsoft%20and%20the%20customer%20received%20the%20phishing%20mail%20into%20the%20mailbox.%20At%20the%20later%20time%2C%20when%20this%20phising%20attack%20is%20recognized%20by%20Microsoft%2C%20do%20this%20emails%2C%20that%20were%20previously%20received%20get%20purged%20from%20the%20mailboxes%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20for%20your%20answer%3C%2FP%3E%3CP%3EBest%20regards%20Tibor%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1456323%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1456380%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20online%20antispam%20feature%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1456380%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F696361%22%20target%3D%22_blank%22%3E%40tibor2120%3C%2FA%3E%26nbsp%3BHello%2C%3CSPAN%3E%26nbsp%3BZAP%20detects%20and%20takes%20action%20on%20messages%20that%20have%20already%20been%20delivered%20to%20Exchange%20Online%20mailboxes.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Foffice-365-security%2Fzero-hour-auto-purge%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Foffice-365-security%2Fzero-hour-auto-purge%3Fview%3Do365-worldwide%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1456419%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20online%20antispam%20feature%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1456419%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F551905%22%20target%3D%22_blank%22%3E%40bec064%3C%2FA%3E%26nbsp%3BThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1457632%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20online%20antispam%20feature%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1457632%22%20slang%3D%22en-US%22%3ERequires%20A5%20and%2For%20ATP%20(1%20or%202)%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1458327%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20online%20antispam%20feature%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1458327%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F21963%22%20target%3D%22_blank%22%3E%40Tony%20Derricott%3C%2FA%3E%26nbsp%3BHello%20Tony!%20Good%20question.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAs%20far%20as%20I%20know%20ZAP%20is%20a%20feature%20available%20within%20the%20default%20EOP%20and%20comes%20with%20all%20subscriptions%20that%20has%20mailboxes%20in%20EXO.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hello, our customer has a question about antispam/phishing protection.

 

For example lets say that an o365 customer is under mass phishing attack from an source, that is yet to be recognized by Microsoft and the customer received the phishing mail into the mailbox. At the later time, when this phising attack is recognized by Microsoft, do this emails, that were previously received get purged from the mailboxes?

 

Thank you for your answer

Best regards Tibor

4 Replies
Best Response confirmed by tibor2120 (New Contributor)
Solution

@tibor2120 Hello, ZAP detects and takes action on messages that have already been delivered to Exchange Online mailboxes.

 

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/zero-hour-auto-purge?vie...

Requires A5 and/or ATP (1 or 2)?

@Tony Derricott Hello Tony! Good question.

 

As far as I know ZAP is a feature available within the default EOP and comes with all subscriptions that has mailboxes in EXO.