Apply ATP/Spam/Phishing protection on forwarded messages

Talha 216 Reputation points
2021-12-02T01:09:40.803+00:00

Hi
we are using “Freshdesk” to provide ticket based customer support and for that we are currently forwarding all the emails which are coming to Shared mailbox support@mathieu.company .com >> Freshdesk but at time of forwarding office 365 exchange server doesn’t apply any protection policies to check the email for any phishing or spam threats.
Is there a way to first apply all the protections policies only then it will be forwarded? Do policies apply on forwarded messages? Is there any work around where I can get office365 to check email for threats before forwarding emails to our ticket system?
thank

Exchange Online
Exchange Online
A Microsoft email and calendaring hosted service.
6,198 questions
Microsoft Security | Intune | Configuration Manager | Other
{count} votes

2 answers

Sort by: Most helpful
  1. Joyce Shen - MSFT 16,701 Reputation points
    2021-12-08T06:32:44.52+00:00

    Hi @Talha

    For inbound spam filter, you may consider the scenario for using a third-party cloud filtering service with Microsoft 365 or Office 365.

    And Use Enhanced Filtering for Connectors (highly recommended): Use Enhanced Filtering for Connectors (also known as skip listing) on the Partner inbound connector that receives messages from the third-party application. This allows EOP and Microsoft 365 Defender for Office 365 scanning on the messages for a double anti-spam check.

    1 person found this answer helpful.
    0 comments No comments

  2. Joyce Shen - MSFT 16,701 Reputation points
    2021-12-03T02:09:34.413+00:00

    Hi @Talha

    In Microsoft 365 organizations with Exchange Online mailboxes, or standalone Exchange Online Protection (EOP) organizations without Exchange Online mailboxes, all messages sent to your organization pass through EOP before your workers see them.

    And we can see how EOP works:
    154643-image.png

    External emails send to your shared mailbox will pass through EOP, while this will not applied to internal senders.

    And if “Freshdesk” is outside your orgainization, you could refer to the Outbound spam protection in EOP

    And for details for Exchange Online Protection overview


    If an Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.