Checking PST files for viruses before import in ExO

David Jacobs 41 Reputation points

Hello everyone,

unfortunately I did not find any information about this in the MS documents.

With the PST import function the PST files are copied to an Azure-Blob storage and from there they are imported to the target mailbox by a PST import job.

Does one of the two processes (copy to Azure / import to mailbox) involve a virus check by Microsoft? Does Microsoft recognize contaminated PST files and how do they handle them? Are the files blocked (with which message) or is the data copied/imported without checking?

Does anyone here have information about this?

Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,275 questions
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,046 questions
0 comments No comments
{count} votes

Accepted answer
  1. Lydia Zhou - MSFT 2,371 Reputation points Microsoft Employee

    @David Jacobs

    Based on my knowledge, Exchange Online doesn't provide additional immediate scanning for items when they are imported to the mailbox from Azure.

    From the PST import workflow, we can know that M365 analyzes the data in the PST files before starting the import job, but it doesn't mention that M365 will provide virus scanning in this process. Since I mainly provide support for Exchange, if needed, you can post a new question specifically only with azure-blob-storage tag to know if Azure Blob provides any virus scanning feature.

    For your reference: Overview of importing your organization's PST files.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.

2 additional answers

Sort by: Most helpful
  1. Andy David - MVP 138K Reputation points MVP

    All messages will be scanned for malware. Now does that mean it will immediately catch PST imports in Azure? Don't know.
    But if a message is infected. it will be caught in Exchange Online

    1 person found this answer helpful.

  2. Andy David - MVP 138K Reputation points MVP

    HI @David Jacobs
    Only when the messages are sent or received

    For organizations with Exchange Online mailbox, the service scans for malware in all inbound and outbound messages, including messages sent between internal recipients.

    1 person found this answer helpful.
    0 comments No comments