Office 365: Everything You Wanted to Know How to Use this Document?

Features

• 
  Using multiple anti-malware engines, EOP offers multilayered protection that’s designed to catch all known malware
  
• 
  Messages transported through the service are scanned for malware (viruses and spyware)
  
• 
  If malware is detected, the message is deleted. Notifications may also be sent to senders or administrators when an infected message is deleted and not delivered.
  
• 
  Customize anti-malware policies in the EAC. You can configure the default policy for company-wide settings.
  
• 
  Create custom content filter policies and apply them to specified users, groups, or domains in your organization
  

• 
  Uses proprietary anti-spam technology to help achieve high accuracy rates.
  
• 
  Provides strong connection filtering and content filtering on all inbound messages.
  

• 
  Outbound spam filtering is also always enabled if you use the service for sending outbound email.
  
• 
  Spam filtering cannot be completely disabled, but certain company-wide settings can be modified by editing your default anti-spam policies
  
• 
  Create custom content filter policies and apply them to specified users, groups, or domains in your organization.
  

• 
  Messages identified as spam and messages that match a transport rule can be sent to the administrator quarantine.
  
• 
  Administrators can search for and view details about quarantined email messages in the EAC.
  
• 
  After locating the email message, you can release it to specific users and optionally report it as a false positive (not junk) message to the Microsoft Spam Analysis Team if it was misidentified as spam.
  
• 
  Spam quarantine for end users lets them manage their own spam-quarantined messages.
  

• 
  From Office Outlook or Outlook Web Access, lets EOP users easily report junk (spam) email to Microsoft for analysis to help reduce the number and impact of future junk email messages filtered by the service.
  

Resources

• 
  Office 365 Security & Compliance: Exchange Online Protection
  

• 
  Exchange Online Protection
  
• 
  Exchange Online Protection Service Description
  
• 
  Exchange Online Protection Limits
  
• 
  Anti-Malware Protection and Anti-Malware Protection FAQ
  
• 
  Anti-Spam Protection and Anti-Spam Protection FAQ
  
• 
  Prevent false positive email marked as spam with a safelist or other techniques
  
• 
  What's the Difference Between Junk Email and Bulk Email?
  
• 
  Customize an SPF record to validate outbound email sent from your domain
  
• 
  Backscatter Messages and EOP
  

Advanced Threat Protection (ATP)

Advanced threat protection (ATP) in Exchange Online Protection (EOP) helps you prevent zero-day malware attacks in your email environment.

ATP provides a way for you to create policies in the Exchange Admin Center (EAC) that help ensure your users access only links in emails or attachments to emails that are identified as not malicious.

If you already use EOP to help combat malware in your email messaging environment, adding ATP will provide more-effective protection than ever before against attacks propagated by unsafe links and unsafe attachments.

ATP complements existing EOP anti-malware scanning. Only those attachments that successfully pass anti-malware scanning are affected by your safe attachments or safe links policies.

Features & Benefits

ATP for Exchange Online delivers the following benefits:

• 
  Protection against unknown malware and viruses—Today EOP employs a robust and layered anti-virus protection powered with three different engines against known malware and viruses. ATP extends this protection through a feature called Safe Attachments, which protects against unknown malware and viruses, and provides better zero-day protection to safeguard your messaging system. All messages and attachments that don’t have a known virus/malware signature are routed to a special hypervisor environment, where a behavior analysis is performed using a variety of machine learning and analysis techniques to detect malicious intent. If no suspicious activity is detected, the message is released for delivery to the mailbox.
  
• 
  Real time, time-of-click protection against malicious URLs—EOP scans each message in transit in Office 365 and provides time of delivery protection, blocking any malicious hyperlinks in a message. But attackers sometimes try to hide malicious URLs with seemingly safe links that are redirected to unsafe sites by a forwarding service after the message has been received. ATP’s Safe Links feature proactively protects your users if they click such a link. That protection remains every time they click the link, as malicious links are dynamically blocked while good links can be accessed.
  
• 
  Rich reporting and URL trace capabilities—ATP also offers rich reporting and tracking capabilities, so you can gain critical insights into who is getting targeted in your organization and the category of attacks you are facing. Reporting and message tracing allows you to investigate messages that have been blocked due to an unknown virus or malware, while the URL trace capability allows you to track individual malicious links in the messages that have been clicked.
  

Upcoming Improvements

• 
  New reports—Get better insights to malware activity. Security admins will have a new reporting dashboard to see details of malware that Office 365 Advanced Threat Protection is analyzing. The new reports will be in preview later this year.
  
• 
  Dynamic delivery—Better performance and lower latency for emails with attachments. Users will see a placeholder while attachments are scanned in a sandbox environment. If deemed safe, attachments are re-inserted into the email. Dynamic Delivery is rolling out to customers now.
  
• 
  URL detonation—Deeper protection against malicious URLs. Not only do we check a list of malicious URLs when a user clicks on a link, but Office 365 will also perform real-time behavioral malware analysis in a sandbox environment to identify malicious links. URL reputation checks are part of Advanced Threat Protection today; URL detonation will be in preview later this year.
  
• 
  Intelligence sharing with Windows Defender Advanced Threat Protection—Security admins will be able to see malware activity and relationships across Windows 10 and Office 365. Integration with Windows will be in preview in early 2017.
  
• 
  Broader protection—Advanced Threat Protection will extend to include protection for SharePoint Online, Word, Excel, PowerPoint and OneDrive for Business. These extended capabilities will be in preview in early 2017.
  

Scenarios

Advanced protection against unknown & sophisticated threats in end-user email, attachments & URLs.

• 
  protect against unknown malware and viruses
  
• 
  real time, time-of-click protection against malicious URLs
  
• 
  rich reporting and URL trace capabilities
  

Resources

• 
  Microsoft Mechanics: Overview of Advanced Threat Protection in Exchange: new tools to stop unknown attacks
  
• 
  Advanced threat protection for safe attachments and safe links
  
• 
  Set up a safe attachments policy in EOP
  
• 
  Set up a safe links policy in EOP
  

Directory: docs
docs -> Application for acem
docs -> Observational Assessment of Teaching Practices Teaching Assessment Initiative Proposal Submitted to The Teachers for a New Era project
docs -> Traditional British values
docs -> From Warfighters to Crimefighters: The Origins of Domestic Police Militarization
docs -> Borzoi Club of America Register of Merit Program I. What is a Register Of Merit
docs -> Protecting the rights of the child in the context of migration
docs -> United Nations E/C. 12/Esp/5
docs -> 9th May 1950 the schuman declaration
docs -> Getting To Outcomes® in Services for Homeless Veterans 10 Steps for Achieving Accountability

Download 0.81 Mb.

Share with your friends: