Defender for Email Attachment Scanning Policy Creation

This guide will provide background information on creating a safe attachment threat policy that will monitor email attachment scanning for inbound and outbound mail flow.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: TBD

Domain: TBD

Modifies: TBD

Creating a Safe Attachments Threat Policy

  1. Navigate to the Safe Attachments – Microsoft Defender portal, locate and select the Create action.
  2. You will supply basic identification information such as the Name and Description for the policy. Select Next to proceed.
  3. You will be able to configure Internal Users, Groups, or Domains Assignments or Exclusion for the policy, this section will outline the selected groups that will be in scope to have the email security deployed. Select Next to proceed.
  4. A list of all the possible configuration settings will be listed, make sure to apply the necessary settings to fit the needs of your organization. Select Next to continue.
  5. The review page will allow you to see all configured settings for the policy, if you detect a discrepancy at this stage make note of the section and select Back to go to the previous sections to make the necessary alterations before finalization. If everything checks out, select Submit to publish the threat policy.
  6. A prompt will be displayed detailing that the policy has been created and has been put into immediate effect. Select Done to finalize the creation process.

Need Assistance?

Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.