Comments (4)
It probably should be getting raised as informational, but the reason we recommended moving phish to quarantine was to stop these 'legitimate looking emails' from being in front of the user and risking them releasing it. Sending quarantine notifications every day is putting these emails in front of the user. For now this is as designed, but there may be a feature coming in product that might change that stance.
Thanks for logging though.
from orca.
Hi Cam
In the last 30 days the only "Prevented phish messages" were legit emails from Microsoft. I have surveyed a few folks and 1 Day is good, as most real Spam and Phish get caught as High, so they are not in the Spam Notification, just suspect and most times someone has signed up to that list or False Positive. With 3 Days you could get Notification on Wednesday and next is Saturday, so won't be until Monday you see the Notification for something got caught up on Wednesday afternoon
False Positive - Prevented phish messages
Sender: | [email protected]
Subject: | Thank you for joining us for the Empower your remote workforce webinar
Sender: | [email protected]
Subject: | Join us today's webinar: What's new and upcoming in OneDrive
Sender: | [email protected]
Subject: | Reminder about tomorrow's webinar - Empower your remote workforce with data security in OneDrive
from orca.
Cheers @DavidTaig
Decreasing the spam notification window isn't a great solution for false-positives. Whilst the notifications may show you the false-positives, they will also show messages designed to look legitimate too (but are in-fact, suspect). I'd encourage that you investigate these false-positives/report them to Microsoft via the plugin/or admin submissions. On face value with those messages, i'd suspect a high BCL.
from orca.
Thanks @cammurray
I thought I check the old FOPE settings
3 Days minimum - http://techgenix.com/transitioning-forefront-online-protection-exchange-fope-part5/
Spam Quarantine Notification
Notification interval in days (3-14)
EOP Spam notifications
https://protection.office.com/antispam
Default spam filter policy โ(always ON)โ
Configure end-user spam notifications...
Send end-user spam notifications every (days)
3 (Default) 1 - 15 available
I provided an update on Microsoft IT offline ;)
from orca.
Related Issues (20)
- typo in section for First Contact Safety Tip HOT 1
- Policies with a lower priority affecting score HOT 3
- Read only policy affects score HOT 3
- Standard preset always appears disabled HOT 8
- Honor DMARC record when email is detected as spoof HOT 1
- Default policy and built-in should be marked disabled in instances where a preset is configured HOT 1
- Deprecation of ASF control checks HOT 1
- Some checks are not showing if the policy is disabled HOT 1
- Raise failures when relying on BIP and BIP doesn't have a secure setting
- Some checks returning security preset full name rather than the display HOT 1
- Apply a preset policy with no exemptions
- Disabled or policies that don't apply will give positive score values
- anti spam policy issue - ORCAConfigLevel ? HOT 1
- Preset policies cannot be used as built-in replacement, are applied first
- Set up the required selector DNS records in order to support DKIM HOT 4
- Licensing state? HOT 1
- Misleading Information & action in Anti-Malware. Disable notifying internal senders of malware detection
- SPF Records are not counted for custom domains
- 'Get-ProtectionAlert' is not recognized as a name of a cmdlet HOT 2
- About โDoes not applyโ
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. ๐๐๐
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google โค๏ธ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from orca.