Manage Email URLs

Use this operation to add or remove URLs from the Defender for Email allow and block lists.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: Email Security

Domain: URL Management

Modifies: Allowed Email URLs, Blocked Email URLs

When to Perform this Operation

As Needed: Proactive or in Response to User/Security

Technical Description and Importance

Managing email URLs in Defender for Email helps prevent users from accessing malicious links while ensuring necessary business communications are not disrupted. Blocking harmful URLs mitigates phishing and malware threats, while allowing trusted URLs ensures legitimate emails function as expected. This management process supports organizational security policies and reduces false positives, improving email filtering accuracy. Routine updates help maintain a balance between security enforcement and business continuity.

Management Options

• Allow a URL
• Block a URL

Allow a URL:

Purpose
Add a URL to the allowed list in Defender for Email.
Use Case
A critical business partner’s URL is incorrectly classified as malicious, preventing users from accessing important content.

Block a URL:

Purpose
Add a URL to the blocked list in Defender for Email.
Use Case
A phishing campaign has been identified, and the malicious URL must be blocked to prevent compromise.

Operation	Action	Target
Allow a URL	Addition	Allowed Email URLs
Block a URL	Removal	Blocked Email URLs

Allow a URL

This operation submits a URL to the allow list in Defender for Email to ensure it is not mistakenly blocked.

       1. Defender for Email URL Submit and Allow Action

Block a URL

This operation adds a URL to the block list in Defender for Email, preventing users from accessing it.

       1. Defender for Email URL Block

Need Assistance?