Anti-Spam & Anti-Phishing Policies
Understanding the Concept
Anti-spam policies control how Exchange Online handles suspected spam, including setting SCL thresholds, defining bulk mail handling, and configuring allow/block lists. Policies can be customized per user, group, or domain.
Anti-phishing policies protect against impersonation attacks where attackers spoof trusted senders. Features include mailbox intelligence, spoof intelligence, and impersonation protection for specific users and domains.
Advanced anti-phishing in Defender for Office 365 adds machine learning models, safe links detonation, and campaign views to detect sophisticated phishing attempts.
Key Points
Why This Matters
Phishing is the top attack vector for organizations. Properly configured anti-spam and anti-phishing policies dramatically reduce the risk of credential theft, business email compromise, and financial fraud.