For more information, see the Use Exchange Online PowerShell or standalone EOP PowerShell to configure Safe Attachments policies section later in this article. In Exchange Online PowerShell or standalone EOP PowerShell, you manage the policy and the rule separately.
When you remove a Safe Attachments policy, the safe attachment rule and the associated safe attachment policy are removed. All other settings modify the associated safe attachment policy. When you modify a Safe Attachments policy, settings related to the name, priority, enabled or disabled, and recipient filters modify the safe attachment rule. 
When you create a Safe Attachments policy, you're actually creating a safe attachment rule and the associated safe attachment policy at the same time using the same name for both. The difference between these two elements isn't obvious when you manage Safe Attachments policies in the Microsoft 365 Defender portal: The safe attachment rule: Specifies the priority and recipient filters (who the policy applies to). The safe attachment policy: Specifies the actions for unknown malware detections, whether to send messages with malware attachments to a specified email address, and whether to deliver messages if Safe Attachments scanning can't complete. The basic elements of a Safe Attachments policy are: You can configure Safe Attachments policies in the Microsoft 365 Defender portal or in PowerShell (Exchange Online PowerShell for eligible Microsoft 365 organizations with mailboxes in Exchange Online standalone EOP PowerShell for organizations without Exchange Online mailboxes, but with Defender for Office 365 add-on subscriptions). You can also use the procedures in this article to create Safe Attachments policies that apply to specific users, group, or domains. For more information, see Preset security policies in EOP and Microsoft Defender for Office 365. For more information, see Safe Attachments in Microsoft Defender for Office 365.Īlthough there's no default Safe Attachments policy, the Built-in protection preset security policy provides Safe Attachments protection to all recipients (users who aren't defined in custom Safe Attachments policies). 
Safe Attachments is a feature in Microsoft Defender for Office 365 that uses a virtual environment to check attachments in inbound email messages after they've been scanned by anti-malware protection in Exchange Online Protection (EOP), but before delivery to recipients. If you're a home user looking for information about attachment scanning in Outlook, see Advanced security.
This article is intended for business customers who have Microsoft Defender for Office 365.
0 kommentar(er)
