Safe Links Blocks forms.office

[OlaOwolabi]

Hi guys,

Keep getting organization's users complaining about form.office being blocked by safe links. Thought this is suppose to be scanned and I doubt if there's any involvement such URLs are potential malicious URL.

Quick option is to whitelist/exempt forms.office URL. I do not think that's a good recommendation since some forms may be indeed malicious. I also thought reputation of emails are based on attributes such as sender, IP etc. which in this case is intra-org.

Any suggestions with this new development? Thank you.

[#2]

Report the offending messages to Microsoft, so they can adjust their filters.

[#3]

Thanks so much @VasilMichev,

That has been done, through submission of the URL not to be blocked. However, just wondering why the filter decided to flag newly created forms or probably flagged the URL domain (*forms.office.com*). Plus, the message (email) wasn't flagged phishing until the safe links blocked access to the URL (forms).

[#4]

@OlaOwolabi We have the same here. Where do you whiteliste and more important, where to report this URL to Microsoft?

Thx in advance!

[#5]

Hi @chrisd303 

User can report email as phishing. Alternatively, admin can report URL or email phishing / malware (or Not-Phishing) through the Microsoft SCC portal > Threat Management > Submissions.

Though not recommended, to whitelist URL - check out below Microsoft doc / Section (look out for Do not rewrite the following URLs);

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-atp-safe-links-po...

[#6]

@OlaOwolabi 

Thx for your prompt feedback. Gone for the whitelist as a quick fix and also submitted to MS in SCC. Great support!