Microsoft Defender blocks url

Question

A user in the company I work got an error message while opening a link in an email. It got through our spamfilter.

I have never seen this error before.

We don't have a licence for Advanced Threat Protection, so there no option in the Security admin center to turn off Safe links or even modify it. So how can it be that we get this error, and are not able to do anything about it?

How can I make sure the user can open the link without problems?

Answer 1

Seems like the license that give you access to safe link and attachment have expired, if not try if you can get a trial version of E5 to add the link not to be re-written on the safe link settings.

Try using this link to access the safelink portal https://security.microsoft.com/safelinksv2 to see if you have access to it.

Answer 2

Hello @Margot

There are certain sites, that Microsoft proactively filters to protect their users even if they don't have ATP in their plan. My recomendation is to report a false positive to Microsoft if the site is trustworthy.

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/defender-endpoint-false-positives-negatives?view=o365-worldwide

Hope this helps with your query,

--
--If the reply is helpful, please Upvote and Accept as answer--