Recent DiscussionsMost RecentNewest TopicsMost LikesSolutionsTagged:TagRe: 'system has learned from the submission / mail is automatically allowed' It means that since the last 45 days that allow entry was not used, meaning it is now redundant i.e, there are no emails from that entity being categorized as malicious anymore (system learned). So, the allow can now be expired. When you submit and opted to add an allow entry the default expiry for it is '45 days after last used date'. Re: Preset policies have suddenly started notifying users of quarantined messages AnonTechSpecialist I understand. I don't have an ETA on when we will address this but certainly agree with the ask and is top of mind for us. Re: Preset policies have suddenly started notifying users of quarantined messages mvalecruz OzOscroft Thanks for reporting this. This change was only made for regular phishing emails. That bucket mostly contains emails which failed dmarc/spoof and as such can have some false positives. So, giving end user notifications will enable them to see potentially useful emails stuck in quarantine and release them. But I understand why some admins feel like this is a risk. We will look to address this soon. Just a quick check, would a policy which enables end user quarantine notifications but need admin approval to release, an acceptable policy to you?
Recent Blog ArticlesNewest TopicsMost LikesTagged:TagStrengthening calendar security through enhanced remediation In today’s evolving threat landscape, phishing attacks are becoming increasingly sophisticated, often leveraging meeting invites to bypass traditional defenses. While Security Operations (SOC) teams ...Updates to Configuration Analyzer in Microsoft defender for Office 365 New recommendations, new flyout view with more details about recommendations and ability to export.
MicrosoftMicrosoftMicrosoftMicrosoft
