You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: exchange/exchange-ps/exchange/Disable-SafeAttachmentRule.md
+1-1Lines changed: 1 addition & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -14,7 +14,7 @@ ms.reviewer:
14
14
## SYNOPSIS
15
15
This cmdlet is available only in the cloud-based service.
16
16
17
-
Use the Disable-SafeAttachmentRule cmdlet to disable safe attachment rules in your cloud-based organization.
17
+
Use the Disable-SafeAttachmentRule cmdlet to disable safe attachment rules in your cloud-based organization. This cmdlet is also responsible for disabling complete Safe Attachments policies in the admin center, which consist of the safe attachment rule and the corresponding assigned safe attachment policy in PowerShell.
18
18
19
19
**Note**: We recommend that you use the Exchange Online PowerShell V2 module to connect to Exchange Online PowerShell. For instructions, see [Connect to Exchange Online PowerShell](https://docs.microsoft.com/powershell/exchange/connect-to-exchange-online-powershell).
Copy file name to clipboardExpand all lines: exchange/exchange-ps/exchange/Enable-SafeAttachmentRule.md
+1-1Lines changed: 1 addition & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -14,7 +14,7 @@ ms.reviewer:
14
14
## SYNOPSIS
15
15
This cmdlet is available only in the cloud-based service.
16
16
17
-
Use the Enable-SafeAttachmentRule cmdlet to enable safe attachment rules in your cloud-based organization.
17
+
Use the Enable-SafeAttachmentRule cmdlet to enable safe attachment rules in your cloud-based organization. This cmdlet is also responsible for disabling complete Safe Attachments policies in the admin center, which consist of the safe attachment rule and the corresponding assigned safe attachment policy in PowerShell.
18
18
19
19
**Note**: We recommend that you use the Exchange Online PowerShell V2 module to connect to Exchange Online PowerShell. For instructions, see [Connect to Exchange Online PowerShell](https://docs.microsoft.com/powershell/exchange/connect-to-exchange-online-powershell).
Copy file name to clipboardExpand all lines: exchange/exchange-ps/exchange/New-AntiPhishPolicy.md
+4Lines changed: 4 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -444,6 +444,8 @@ This setting is part of impersonation protection and is only available in Micros
444
444
445
445
The ExcludedDomains parameter specifies an exception for impersonation protection that looks for the specified domains in the message sender. You can specify multiple domains separated by commas.
446
446
447
+
The maximum number of entries is approximately 1000.
448
+
447
449
```yaml
448
450
Type: MultiValuedProperty
449
451
Parameter Sets: (All)
@@ -462,6 +464,8 @@ This setting is part of impersonation protection and is only available in Micros
462
464
463
465
The ExcludedSenders parameter specifies an exception for impersonation protection that looks for the specified message sender. You can specify multiple email addresses separated by commas.
464
466
467
+
The maximum number of entries is approximately 1000.
Safe Attachments is a feature in Microsoft Defender for Office 365 that opens email attachments in a special hypervisor environment to detect malicious activity. For more information, see [Safe Attachments in Defender for Office 365](https://docs.microsoft.com/microsoft-365/security/office-365-security/atp-safe-attachments).
41
41
42
-
New policies that you create using this cmdlet aren't applied to users and aren't visible in admin centers. You need to use the SafeAttachmentPolicy parameter on the New-SafeAttachmentRule or Set-SafeAttachmentRule cmdlets to associate the policy with a rule.
42
+
New safe attachment policies that you create using this cmdlet aren't applied to users and aren't visible in the admin center. You need to use the SafeAttachmentPolicy parameter on the New-SafeAttachmentRule or Set-SafeAttachmentRule cmdlets to associate the policy with a rule to create a complete Safe Attachments policy that's visible in the admin center.
43
+
44
+
A safe attachment policy can be assigned to only one safe attachment rule.
43
45
44
46
You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see [Find the permissions required to run any Exchange cmdlet](https://docs.microsoft.com/powershell/exchange/find-exchange-cmdlet-permissions).
45
47
@@ -50,7 +52,7 @@ You need to be assigned permissions before you can run this cmdlet. Although thi
The Action parameter specifies the action for the Safe Attachments policy. Valid values are:
80
+
The Action parameter specifies the action for the safe attachment policy. Valid values are:
79
81
80
-
- Allow: Attachments aren't scanned by Safe Attachments policies.
82
+
- Allow: Deliver the message if malware is detected in the attachment and track scanning results. This value corresponds to **Monitor** for the **Safe Attachments unknown malware response** property of the policy in the admin center.
81
83
- Block: Block the email message that contains the malware attachment. This is the default value.
82
84
- Replace: Deliver the email message, but remove the malware attachment and replace it with warning text.
83
85
- DynamicDelivery: Deliver the email message with a placeholder for each email attachment. The placeholder remains until a copy of the attachment is scanned and determined to be safe. For more information, see [How Dynamic Delivery works](https://docs.microsoft.com/microsoft-365/security/office-365-security/dynamic-delivery-and-previewing#how-dynamic-delivery-works).
84
86
87
+
The value of this parameter is meaningful only if the value of the Enable parameter is also $true (the default value is $false).
88
+
89
+
To specify no action for the safe attachment policy (corresponds to **Off** for the **Safe Attachments unknown malware response** property of the policy in the admin center), use the Enable parameter with the value $false.
90
+
85
91
The results of all actions are available in message trace.
The ActionOnError parameter specifies the error handling option for Safe Attachments scanning (what to do if scanning times out or an error occurs). Valid values are:
107
+
The ActionOnError parameter specifies the error handling option for Safe Attachments scanning (what to do if attachment scanning times out or an error occurs). Valid values are:
102
108
103
-
- $true: The action specified by the Action parameter is applied to messages even when the attachments aren't successfully scanned. This is the default value.
109
+
- $true: This is the default value. The action specified by the Action parameter is applied to messages even when the attachments aren't successfully scanned. This value is required when the Redirect parameter value is $true. Otherwise, messages might be lost.
104
110
- $false: The action specified by the Action parameter isn't applied to messages when the attachments aren't successfully scanned.
This parameter isn't used. To enable or disable a safe attachment policy, use the Enabled parameter on the New-SafeAttachmentRule or Set-SafeAttachmentRule cmdlets.
161
+
The Enable parameter works with the Action parameter to specify the action for the safe attachment policy. Valid values are:
162
+
163
+
- $true: The Action parameter specifies the action for the Safe Attachment policy.
164
+
- $false: This is the default value. Attachments are not scanned by Safe Attachments, regardless of the value of the Action parameter. This value corresponds to **Off** for the **Safe Attachments unknown malware response** property of the policy in the admin center.
165
+
166
+
To enable or disable a complete Safe Attachments policy in the admin center (the combination of the rule and the corresponding associated policy in PowerShell), use the Enable-SafeAttachmentRule or Disable-SafeAttachmentRule cmdlets.
The Redirect parameter specifies whether to send detected malware attachments to another email address. Valid values are:
198
+
The Redirect parameter specifies whether to deliver messages that were identified by Safe Attachments as containing malware attachments to another email address. Valid values are:
188
199
189
-
- $true: Malware attachments are sent to the email address specified by the RedirectAddress parameter.
190
-
- $false: Malware attachments aren't sent to another email address. This is the default value.
200
+
- $true: Messages that contain malware attachments are delivered to the email address specified by the RedirectAddress parameter. This value is required when the ActionOnError parameter value is $true. Otherwise, messages might be lost.
201
+
- $false: Messages that contain malware attachments aren't delivered to another email address. This is the default value.
The RedirectAddress parameter specifies the email address where detected malware attachments are sent when the Redirect parameter is set to the value $true.
217
+
The RedirectAddress parameter specifies the email address to deliver messages that were identified by Safe Attachments as containing malware attachments when the Redirect parameter is set to the value $true.
You need to specify at least one condition for the rule.
43
43
44
-
You need to add the safe attachment rule to an existing policy by using the SafeAttachmentPolicy parameter. You create safe attachment policies by using the New-SafeAttachmentPolicy cmdlet.
44
+
A safe attachment policy can be assigned only to one safe attachment rule.
45
45
46
46
Safe Attachments is a feature in Microsoft Defender for Office 365 that opens email attachments in a special hypervisor environment to detect malicious activity. For more information, see [Safe Attachments in Defender for Office 365](https://docs.microsoft.com/microsoft-365/security/office-365-security/atp-safe-attachments).
Copy file name to clipboardExpand all lines: exchange/exchange-ps/exchange/Set-AntiPhishPolicy.md
+4Lines changed: 4 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -448,6 +448,8 @@ This setting is part of impersonation protection and is only available in Micros
448
448
449
449
The ExcludedDomains parameter specifies an exception for impersonation protection that looks for the specified domains in the message sender. You can specify multiple domains separated by commas.
450
450
451
+
The maximum number of entries is approximately 1000.
452
+
451
453
```yaml
452
454
Type: MultiValuedProperty
453
455
Parameter Sets: (All)
@@ -466,6 +468,8 @@ This setting is part of impersonation protection and is only available in Micros
466
468
467
469
The ExcludedSenders parameter specifies an exception for impersonation protection that looks for the specified message sender. You can specify multiple email addresses separated by commas.
468
470
471
+
The maximum number of entries is approximately 1000.
Safe Attachments is a feature in Microsoft Defender for Office 365 that opens email attachments in a special hypervisor environment to detect malicious activity. For more information, see [Safe Attachments in Defender for Office 365](https://docs.microsoft.com/microsoft-365/security/office-365-security/atp-safe-attachments).
40
40
41
+
A safe attachment policy can be assigned to only one safe attachment rule by using the SafeAttachmentPolicy parameter on the New-SafeAttachmentRule or Set-SafeAttachmentRule cmdlets.
42
+
41
43
You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see [Find the permissions required to run any Exchange cmdlet](https://docs.microsoft.com/powershell/exchange/find-exchange-cmdlet-permissions).
The Action parameter specifies the action for the safe attachment policy. Valid values are:
78
80
79
-
- Allow: Attachments aren't scanned by safe attachment policies.
81
+
- Allow: Deliver the message if malware is detected in the attachment and track scanning results. This value corresponds to **Monitor** for the **Safe Attachments unknown malware response** property of the policy in the admin center.
80
82
- Block: Block the email message that contains the malware attachment. This is the default value.
81
83
- Replace: Deliver the email message, but remove the malware attachment and replace it with warning text.
82
84
- DynamicDelivery: Deliver the email message with a placeholder for each email attachment. The placeholder remains until a copy of the attachment is scanned and determined to be safe. For more information, see [How Dynamic Delivery works](https://docs.microsoft.com/microsoft-365/security/office-365-security/dynamic-delivery-and-previewing#how-dynamic-delivery-works).
83
85
86
+
The value of this parameter is meaningful only if the value of the Enable parameter is also $true (the default value is $false).
87
+
88
+
To specify no action for the safe attachment policy (corresponds to **Off** for the **Safe Attachments unknown malware response** property of the policy in admin center), use the Enable parameter with the value $false.
89
+
84
90
The results of all actions are available in message trace.
The ActionOnError parameter specifies the error handling option for safe attachment scanning (what to do if attachment scanning times out or an error occurs). Valid values are:
106
+
The ActionOnError parameter specifies the error handling option for Safe Attachments scanning (what to do if attachment scanning times out or an error occurs). Valid values are:
101
107
102
-
- $true: The action specified by the Action parameter is applied to messages even when the attachments aren't successfully scanned. This is the default value.
108
+
- $true: This is the default value. The action specified by the Action parameter is applied to messages even when the attachments aren't successfully scanned. This value is required when the Redirect parameter value is $true. Otherwise, messages might be lost.
103
109
- $false: The action specified by the Action parameter isn't applied to messages when the attachments aren't successfully scanned.
This parameter isn't used. To enable or disable an existing Safe Attachments policy (the combination of the safe attachment policy and safe attachment rule in PowerShell), use the Enable-SafeAttachmentRule or Disable-SafeAttachmentRule cmdlets.
160
+
The Enable parameter works with the Action parameter to specify the action for the safe attachment policy. Valid values are:
161
+
162
+
- $true: The Action parameter specifies the action for the safe attachment policy.
163
+
- $false: This is the default value. Attachments are not scanned by Safe Attachments, regardless of the value of the Action parameter. This value corresponds to **Off** for **Safe Attachments unknown malware response** property of the policy in the admin center.
164
+
165
+
To enable or disable a complete Safe Attachments policy in the admin center (the combination of the rule and the corresponding associated policy in PowerShell), use the Enable-SafeAttachmentRule or Disable-SafeAttachmentRule cmdlets.
The Redirect parameter specifies whether to send detected malware attachments to another email address. Valid values are:
181
+
The Redirect parameter specifies whether to deliver messages that were identified by Safe Attachments as containing malware attachments to another email address. Valid values are:
171
182
172
-
- $true: Malware attachments are sent to the email address specified by the RedirectAddress parameter.
173
-
- $false: Malware attachments aren't sent to another email address. This is the default value.
183
+
- $true: Messages that contain malware attachments are delivered to the email address specified by the RedirectAddress parameter. This value is required when the ActionOnError parameter value is $true. Otherwise, messages might be lost.
184
+
- $false: Messages that contain malware attachments aren't delivered to another email address. This is the default value.
The RedirectAddress parameter specifies the email address where detected malware attachments are sent when the Redirect parameter is set to the value $true.
200
+
The RedirectAddress parameter specifies the email address to deliver messages that were identified by Safe Attachments as containing malware attachments when the Redirect parameter is set to the value $true.
Safe Attachments is a feature in Microsoft Defender for Office 365 that opens email attachments in a special hypervisor environment to detect malicious activity. For more information, see [Safe Attachments in Defender for Office 365](https://docs.microsoft.com/microsoft-365/security/office-365-security/atp-safe-attachments).
44
44
45
+
A safe attachment policy can be assigned only to one safe attachment rule.
46
+
45
47
You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see [Find the permissions required to run any Exchange cmdlet](https://docs.microsoft.com/powershell/exchange/find-exchange-cmdlet-permissions).
0 commit comments