@N-Open Thank you for reaching out to us, As I understand you are looking for details on which product should be used to provide end to end protection for user from cyber attacks, currently you have Exchange online (Plan 1).
The core of Office 365 security is EOP protection. Microsoft Defender for Office 365 P1 contains EOP in it. Defender for Office 365 P2 contains P1 and EOP.
https://learn.microsoft.com/en-us/answers/questions/649097/eop-and-defender
https://www.youtube.com/watch?v=FFRgZiVKmug
Also, when you access https://security.microsoft.com (Policies & rules - Threat policies)
To answer your below queries, What products do you recommend to provide end to end protection for user from cyber attacks
- for office 365 by protecting from downloading bad attachments
- if they click by mistake a URL how do we protect them
To protect against downloading bad attachments, you can use the Safe Attachments feature in Microsoft Defender for Office 365. Safe Attachments provides protection against unknown and zero-day malware in email attachments and files in SharePoint, OneDrive, and Microsoft Teams.
To protect against users clicking on malicious URLs, you can use the Safe Links feature in Microsoft Defender for Office 365. Safe Links provides protection against malicious links in email messages, Office documents, and other locations, such as Microsoft Teams.
Regarding Protect Entra ID, could you elaborate more on this, so that I can guide you on what product/license is needed to add protection to your environment.
Let me know if you have any further questions, feel free to post back.