phishing protections in exchange online

Question

Where specifically within the admin center(s) linked to the Exchange Online product can you review whether all suggested phishing protections have been enabled for your users/mailboxes? And do Microsoft have a list of suggesting phishing protections that tenants should enable to check the settings align with best practice and that there are no gaps? If Microsoft do not offer such guidance, are there any suggested phishing protections that can be enabled within the system that we can check?

Answer 1

Hi

Exchange Online Protection is the addon that enable more phishing protection. The below chart summarize what plan got it.

To configure or view the policy, please see that document, it's inside the Defender's portal.

Configure anti-phishing policies in EOP

Anti-phishing policies in Microsoft 365

Answer 2

Hi @crib bar

Where specifically within the admin center(s) linked to the Exchange Online product can you review whether all suggested phishing protections have been enabled for your users/mailboxes?

As far as I know, there's no such a place in the admin centers where you can check whether all the suggested phishing protections have been enabled in your tenant.

And do Microsoft have a list of suggesting phishing protections that tenants should enable to check the settings align with best practice and that there are no gaps?

You could review the official document below which lists all the anti-phishing protection features in Exchange Online Protection (EOP) and Microsoft Defender for Office 365, and check them in your own tenant.
Anti-phishing protection in Microsoft 365

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in [our documentation] to enable e-mail notifications if you want to receive the related email notification for this thread.