How to Test AntiSpam Policies And Trigger Quarantine Notifications

Dieter Tontsch (GMail) 917 Reputation points
2022-04-11T11:13:09.45+00:00

In order to test AntiSpam protection in Exchange Online I have created a AntiSpam Policy in Security Center which applies for a certain user and have set "URL to .biz or .info websites" to on.
But if I do send an email to this user with like e.g. "this is a body with https://www.mydomain.biz in it" that emails always go through. Isn't this enough, the rest of the Filter Settings are as default, basically "Bulk email spam action=6" and "Bulk email threshold=On", everything else is set to Off, except "URL to .biz or .info websites".

This URL to .biz or .info websites as the only matching criteria isn't enough to classify it as spam? Is that algorithm a bit more sophisticated? Or does just the AntiSpam policy taking a longer amount of time until it applies, I was waiting for about 30 min. so far.
Another option might be Mail Flow Rule with specific words in subject or body, but I don't see there any option to move such mails into quarantine, I can just block or delete them, which is not what I need for my tests.

And does anyone know if and how I can manually trigger the Quarantine notification settings in order to get email? I have configured this in Global settings accordingly, but I don't know if it works. I also have created Quarantine Policy with Quarantine Notification enabled and referenced a to a AntiSpam policy in Actions.
Because otherwise, if this only works automated I always have to wait at least 1 day, it's not even possible to specify the timie for such quarantine notification emails.

kind regards,
Dieter

Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,319 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,438 questions
0 comments No comments
{count} votes

Accepted answer
  1. KyleXu-MSFT 26,226 Reputation points
    2022-04-12T02:32:48.413+00:00

    @Anonymous

    I try to create an anti-spam inbound policy in my tenant, it could work immediately:
    192095-qa-kyle-09-45-31.png
    192131-qa-kyle-09-46-33.png

    Then send emails from Gmail:
    192103-qa-kyle-10-29-29.png

    I could find it in Quarantine:
    192132-qa-kyle-09-44-37.png

    About the "Quarantine notification", as far as I know the minimum interval is daily notification. It cannot be set to notify immediately so far.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



0 additional answers

Sort by: Most helpful