Exchange endpoint Protection recommendation

Question

Hi,

I have a fresh Exchange Online tenant with the default domain. I’ve been assigned the task of setting up Exchange Endpoint Protection.

I have two questions:

What rules or configurations are recommended for Exchange Endpoint Protection? Could you please explain which rules should be applied and how to configure them?

Is it okay to set up Exchange Endpoint Protection before adding a custom domain? Can I configure it using the default domain and add the custom domain later?

Thank you!

Answer 1

Hi HASSAN BIN NASIR DAR,

Thank you for posting your question in the Microsoft Q&A forum.

Just provide some additional documents for your reference. Hope these could be helpful.

Here is an EOP setup guide for you:

Exchange Online Protection setup guide | Microsoft Exchange

You also can check the following article related to recommended settings for EOP:

Microsoft recommendations for EOP and Defender for Office 365 security settings - Microsoft Defender for Office 365 | Microsoft Learn

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.