Safe Links policies for email messages

[SeniorBraddah]

I've been monitoring our secure score pretty hard lately and noticed "9 points regressed for Create Safe Links policies for email messages".   I went to our Safe Links policy and sure enough, the two recommended items were already configured.  I restarted the policy, and i'm waiting for the "real-time" secure score to update, but it is not. 

How do you guys go about resolving issues like this?

[#2]

@SeniorBraddah 

Same thing here. I'm trying to improve score and created the necessary policies which made me gain some points. Suddenly, one day, I regressed 9 points, next day gained 9 points again, only to lose them again the following day.  No changes were made to the organisation or policies. 

Safe Links Policy states that 100% of my users are affected by this policy. So they are all covered.

Anyone have a clue? 

[#3]

Same issue here. Regressed 9 points for the Safe Links suddenly on Apr. 20.
Double checked the policy (which of course was not even changed) and all seems according to recommendation.

[#4]

Same exact issue here. Regressed 9 points for Safe Links on Apr. 20. No change was made to the policy at the time. Tried disabling and re-enabling the policy. Also verified that safe links is still re-writing our URLs. Points have not come back since.

[#5]

Same here. Today I created a new policy with the same settings and applied it to one user (Also excluded that user from the original policy). Hopefully that will be scored in which case I will assign all users to the new policy and delete the old one. If it doesn't work, I will at least see if the implementation status is updated (both policies should appear). If the status is updated but the scoring is not, I will change the status manually to "Resolved through alternate mitigation". Once every 3 months, I analyze all the items with status other then "Completed" to see if detection has improved or previously accepted risks are still acceptable.

[#6]

Same issue here. Regressed almost 8 points for Safe Links on Apr. 20th.

[#7]

Same here. Has anyone solved the problem?

[#8]

@SeniorBraddah The test I started yesterday (see my other comment) has been completed. I created a new policy with the correct settings and assigned it to a single user. Secure Score now mentions both policies with the correct number of users and states that both policies are configured less securely than recommended.

So it seems the detection is incorrect.

[#9]

"are not configured" or "are configured" less securely?

[#10]

@Marius_S, @Maxim_vanL 

Thanks for your input in this thread. Our Safe links check looks like it corrected itself on the 24th and gained us 9 points, hooray! I am still having a few other checks not reporting correctly, but I have been checking the policy is in place, and marking the status as "resolved through alternate mitigation". 

Fair warning though, you can only mark the status for App and Identity actions.

Brandon

[#11]

@SeniorBraddah 

Can confirm, this is happening to me too.
I have two fresh tenancies i'm building for clients.

Implementation status
100% of users are affected by policies that are configured less securely than is recommended

[#12]

@Marius_S: Thanks, I fixed my post to clear the confusion.

[#13]

@SeniorBraddah marking as "resolved through alternate mitigation" means that even if you delete the Safe Links policy the points will still be granted. Not an ideal solution if you really want to track the score.

Hopefully Microsoft will fix this issue soon as it becomes annoying.

[#14]

Finally, I got my points back!

[#15]

And finally on May 1st I've got my points back. Seems Microsoft has fixed the detection. I hope also for you all.

[#16]

Confirmed that detection has been fixed for my tenant at least.