Body:

With the update of Office 365, Exchange Online has been updated to Exchange 2013 (as you already know) but also ForeFront Online Protection for Exchange (FOPE) as well.

In this post, here are some key points after the upgrade of FOPE – especially to manage quarantined mails.

Access the quarantine

This is important as no more quarantine notification will be sent – apparently as I had few mails marked as spam but was not notified

Accessing the quarantine is done through the Exchange Administration Center (EAC) using the Exchange option below the Admin menu on the top right

image 

Then just click on the Protection section on the left menu

image 

If you don’t get the next screenshot, this means your FOPE tenant is not yet upgraded and you have to continue to use the “old” version thanks to the link provided.

Once you get the Protection section, just click on the quarantine menu to get all mail marked as spam and put in quarantine – default retention is defined to 15 days

image 

Then you can

  1. leave the message as this is indeed a spam
  2. Release the message for delivery to the recipient mailboxes
  3. Release the message and mark as false positive

Select the message you want to release and hit the envelope icon

image 

You will get the 2 release options; at least during the first time, I would recommend to report all false positive spam to avoid to get to many wrong spam

image 

Just follow the wizard to release the mail; it very simple as there is almost nothing to do except confirm the release and/or the report as false positive

If you just release the message (without reporting), you can choose to release to all original recipients or to specific recipients – NOTE this is not available if you report as false positive, all original recipients will get the message

image 

imageimageimage 

On a next post, I will cover the updated mail flow.

Content Filter

The content filter is used to configure the spam policy.

By hitting the Content Filter link, you will get all the associated domains and your Office 365 domain – ie your tenant

This list has been automatically filled based on the previous configuration from your old FOPE tenant.

If you want to start a new configuration, just hit the new button, you will be able to configure all the options described later.

image 

image 

You can define different policy for each domain; just select the domain to be updated and click the Edit button

image 

Then go to the Actions section from the left menu to define action when a potential spam is detected

image 

Using the International Spam section allows you to define specific countries, regions or languages to block and mark as spam. I would recommend to implement sort of testing with this section before as ALL message which match the countries, regions or languages defined will NOT be delivered to the recipients, so you may loose some real message

image 

The last option is used to configure Advanced options to increase the spam score for emails with specific content or value. Once again with this option I would recommend testing before setting up in production

image 

Finally you can define to which users, groups or domains the policy applied

image 

Source: http://blog.hametbenoit.info/Lists/Posts/Post.aspx?ID=567#!

Category: How to do; Servers
Published: 11/28/2013 20:30
]]>