Manage Email Senders and Domains

Use this operation to allow or block specific email senders and domains for tenant communication and email filtering.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: Email Security

Domain: TBD

Modifies: TBD

When to Perform this Operation

As Needed: Proactive or in Response to User/Security

Technical Description and Importance

Managing email senders and domains is critical for maintaining control over email communication and reducing risks from phishing, spam, or spoofed emails. By carefully adding to or removing from the sanctioned and unsanctioned sender lists, organizations ensure their email flow is secure while permitting legitimate communication. Allowing necessary senders minimizes disruptions to business processes, while blocking malicious or unwanted senders prevents potential threats. Routine oversight and updates to sender and domain management enhance the organization's ability to filter email traffic effectively, reducing both spam load and phishing risks.

Management Options

• Allow a Sender or Domain
• Allow a Spoofed Sender or Domain
• Allow a Spam Sender or Domain
• Block a Sender or Domain
• Block a Spoofed Sender or Domain
• Block a Spam Sender or Domain

Allow a Sender or Domain:

Purpose
Add an email sender or domain to the sanctioned tenant sender list to permit communication.
Use Case
A trusted vendor's email is being filtered as spam and needs to be allowed to ensure receipt of invoices.

Allow a Spoofed Sender or Domain:

Purpose
Add a spoofed sender or domain to the sanctioned spoofed sender list to permit legitimate spoofing scenarios.
Use Case
A partner organization uses a marketing tool that sends emails on their behalf and needs to bypass spoofing filters.

Allow a Spam Sender or Domain:

Purpose
Add a sender or domain to the sanctioned spam sender list to allow specific emails flagged as spam.
Use Case
A mass email provider sends promotional content that users wish to receive.

Block a Sender or Domain:

Purpose
Add an email sender or domain to the unsanctioned tenant sender list to prevent further communication.
Use Case
A known phishing domain needs to be blocked after an attack attempt.

Block a Spoofed Sender or Domain:

Purpose
Add a spoofed sender or domain to the unsanctioned spoofed sender list to prevent impersonation attacks.
Use Case
An attacker is spoofing a legitimate organization's domain to send phishing emails.

Block a Spam Sender or Domain:

Purpose
Add a sender or domain to the unsanctioned spam sender list to prevent receipt of spam emails.
Use Case
A sender is consistently flagged as spam and no longer requires monitoring.

Operation	Action	Target
Allow a Sender or Domain	Addition	Sanctioned Tenant Sender and Domains
Allow a Spoofed Sender or Domain	Addition	Sanctioned Spoofed Senders and Domains
Allow a Spam Sender or Domain	Addition	Sanctioned Spam Senders and Domains
Block a Sender or Domain	Removal	Unsanctioned Tenant Sender and Domains
Block a Spoofed Sender or Domain	Removal	Unsanctioned Spoofed Senders and Domains
Block a Spam Sender or Domain	Removal	Unsanctioned Spam Senders and Domains

Allow a Sender or Domain

This operation adds an email sender or domain to the sanctioned tenant sender list, allowing communication.

Defender for Email Tenant Submit and Allow Action

Allow a Spoofed Sender or Domain

This operation adds a spoofed sender or domain to the sanctioned spoofed sender list, allowing specific legitimate spoofing scenarios.

Defender for Email Spoof Allowance

Allow a Spam Sender or Domain

This operation adds an email sender or domain to the sanctioned spam sender list, allowing specific flagged content.

Defender for Email Spam Allowance

Block a Sender or Domain

This operation adds an email sender or domain to the unsanctioned tenant sender list, blocking communication

Defender for Email Tenant Block

Block a Spoofed Sender or Domain

This operation adds a spoofed sender or domain to the unsanctioned spoofed sender list, preventing impersonation attempts.

Defender for Email Spoof Block

Block a Spam Sender or Domain

This operation adds a sender or domain to the unsanctioned spam sender list, blocking further spam emails.

Defender for Email Spam Block

Need Assistance?