Update – November 29th add the spam notification
With the update of Office 365, Exchange Online has been updated to Exchange 2013 (as you already know) but also ForeFront Online Protection for Exchange (FOPE) as well.
In this post, here are some key points after the upgrade of FOPE – especially to manage quarantined mails.
Access the quarantine
This is important as no more quarantine notification will be sent – apparently as I had few mails marked as spam but was not notified
Accessing the quarantine is done through the Exchange Administration Center (EAC) using the Exchange option below the Admin menu on the top right
Then just click on the Protection section on the left menu
If you don’t get the next screenshot, this means your FOPE tenant is not yet upgraded and you have to continue to use the “old" version thanks to the link provided.
Once you get the Protection section, just click on the quarantine menu to get all mail marked as spam and put in quarantine – default retention is defined to 15 days
Then you can
- leave the message as this is indeed a spam
- Release the message for delivery to the recipient mailboxes
- Release the message and mark as false positive
Select the message you want to release and hit the envelope icon
You will get the 2 release options; at least during the first time, I would recommend to report all false positive spam to avoid to get to many wrong spam
Just follow the wizard to release the mail; it very simple as there is almost nothing to do except confirm the release and/or the report as false positive
If you just release the message (without reporting), you can choose to release to all original recipients or to specific recipients – NOTE this is not available if you report as false positive, all original recipients will get the message
On a next post, I will cover the updated mail flow.
Content Filter
The content filter is used to configure the spam policy.
By hitting the Content Filter link, you will get all the associated domains and your Office 365 domain – ie your tenant
This list has been automatically filled based on the previous configuration from your old FOPE tenant.
If you want to start a new configuration, just hit the new button, you will be able to configure all the options described later.
You can define different policy for each domain; just select the domain to be updated and click the Edit button
Then go to the Actions section from the left menu to define action when a potential spam is detected
Using the International Spam section allows you to define specific countries, regions or languages to block and mark as spam. I would recommend to implement sort of testing with this section before as ALL message which match the countries, regions or languages defined will NOT be delivered to the recipients, so you may loose some real message
The last option is used to configure Advanced options to increase the spam score for emails with specific content or value. Once again with this option I would recommend testing before setting up in production
Finally you can define to which users, groups or domains the policy applied
Configure the spam notification to end users
Still while within the content filter section, select the r
ule and hit the Configure end-user spam notifications… link shown on the right side
You will be able to define the delay before sending the notification and the language to use; by default this is not enabled
