Defender for Email Link Scanning Policy Creation

This guide will provide background information on creating a safe links threat policy that will monitor URL scanning for inbound and outbound mail flow.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: TBD

Domain: TBD

Modifies: TBD

Creating a Safe Links Threat Policy

  1. Navigate to the Safe Links – Microsoft Defender portal, locate and select the Create action.
  2. You will supply basic identification information such as the Name and Description for the policy. Select Next to proceed.
  3. You will be able to configure Internal Users, Groups, or Domains Assignments or Exclusion for the policy, this section will outline the selected groups that will be in scope to have the email security deployed. Select Next to proceed.
  4. A list of all the possible configuration settings will be listed, make sure to apply the necessary settings to fit the needs of your organization. Select Next to continue.
  5. You can specify the notifications that will be sent to end users when their emails have been captured for safe links policy deferrals.
  6. The review page will allow you to see all configured settings for the policy, if you detect a discrepancy at this stage make note of the section and select Back to go to the previous sections to make the necessary alterations before finalization. If everything checks out, select Submit to publish the threat policy.
  7. A prompt will be displayed detailing that the policy has been created and has been put into immediate effect. Select Done to finalize the creation process.

Need Assistance?

Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.