Deploy your ATP policy – Part 2

Make sure to order the right license before you start to setup the ATP policy and also double check your end user is host on the exchange online, not on local exchange please, otherwise the ATP won’t work with you. Meanwhile, pls spend couple seconds to scan the QR code below to follow my Wechat account. Your attention is my biggest motivation to keep posting my article.

Let’s review how to setup the rest policy on ATP today. So pls login with the Office 365 Administrator at the admin page.

A screenshot of a social media post

Description automatically generated

Click into “ATP safe link” like the screenshot below:

A screenshot of a cell phone

Description automatically generated

Check the box for “Turn on ATP for SharePoint, OneDrive, and Microsoft Teams” so that your safe link policy not just deploy on your email but also workable on your Sharepoint, Onedrive and Teams. In this case, you can protect all the file you upload or download from the cloud do not have any Malware. For more detail, pls check with the link below:

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/atp-for-spo-odb-and-teams

After that, you should click into “+” so that you can create a customize safe attachment policy on your exchange online.

A screenshot of a social media post

Description automatically generated

Set a name on this policy and choose the action you want to take once you got attachment which contain malware in. I suggest choosing “Dynamic Delivery” in here. You can find more detail information from the link below:

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/dynamic-delivery-and-previewing

A screenshot of a cell phone

Description automatically generated

Check the box like the screenshot below so that you enable the redirect feature. For example, I add my address in this filed so I should be the personal to receive all malware attachment so that I can double check it again and make sure the system doesn’t block it by mistake.

A screenshot of a cell phone

Description automatically generated

So the following screenshot show that how does the safe attachment works for your tenant. Once you receive and email, the end user won’t available to open it until the ATP finish to scan the attachment. So you may need to send out an announcement to let everyone know that the different for the new system.

A close up of a logo

Description automatically generated

A screenshot of a social media post

Description automatically generated

Next Step, Let’s take a look with how to setup the ATP safe links. So pls go back to the home page and click into “ATP Safe Links”.

A screenshot of a cell phone

Description automatically generated

Double click into the Default policy so that you can modify with it.

A screenshot of a cell phone

Description automatically generated

Addd the Block urls if you want and check all the boxes like the screenshot below.

A screenshot of a cell phone

Description automatically generated

Create a customize safe link policy with icon “+”.

A screenshot of a cell phone

Description automatically generated

Set a name of this policy and check the boxes like the screenshot below:

A screenshot of a social media post

Description automatically generated

Put your domain in so that the safe link policy cloud cover your tenant.

A screenshot of a cell phone

Description automatically generated

And the last step is setup the “Anti-Malware” Policy.

A screenshot of a cell phone

Description automatically generated

Double click into the Default policy.

A screenshot of a social media post

Description automatically generated

Check with the follow screenshot and you can decide how should setup the policy on your own.

A screenshot of a social media post

Description automatically generated

If the end user did receive an email contain a malware from the attachment. So the attachment will remove from the original email and redirect to the email address in set in the system. And the attachment need to IT guy to double check with it just in case the system make a mistake.

A screenshot of a social media post

Description automatically generated

After all, the ATP policy is finish to deploy on your tenant. Hope this article can help you to protect your tenant.