Microsoft email security: EOP (Exchange transport rules) vs Microsoft defender (Policy rules)

Birhanu Kassa 41 Reputation points

We currently use Microsoft defender/Exchange as our email security solution. I wanted to know which rules get applied first the Exchange transport rule or the Microsoft defender policies. We have a rule in exchange to block all html attachments, but when I whitelist an external email address within Microsoft ant-phishing policy allow email domains, the messages still get stuck in quarantine.

So, my thought process is that that the exchange rules get applied first and the Microsoft defender anti-spam or ant-phishing policies. So if I need to whitelist an email address I should be doing this in Exchange transport rules as well.

**We use Exchange online

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,337 questions
{count} votes

Accepted answer
  1. Andy David - MVP 141.1K Reputation points MVP
    2 people found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful