Merge pull request MicrosoftDocs#11503 from MicrosoftDocs/CAF-chrisda

CAF-chrisda to Main

Author: chrisda

exchange/exchange-ps/exchange/New-MalwareFilterPolicy.md

@@ -427,8 +427,13 @@ This parameter is available only in the cloud-based service.
 
 The EnableFileFilter parameter enables or disables the common attachments filter (also known as common attachment blocking). Valid values are:
 
-- $true: The common attachments filter is enabled. The file types are specified by the FileTypes parameter.
-- $false: The common attachments filter is disabled. This is the default value.
+- $true: The common attachments filter is enabled. This is the default value.
+- $false: The common attachments filter is disabled.
+
+You specify the file types using the FileTypes parameter. A default list of values is automatically provided, but you can customize it.
+
+You specify the action for detected files using the FileTypeAction parameter.
+
 
 ```yaml
 Type: Boolean
@@ -508,7 +513,7 @@ This parameter is available only in the cloud-based service.
 
 The FileTypeAction parameter specifies what happens to messages that contain one or more attachments where the file extension is included in the FileTypes parameter (the common attachments filter). Valid values are:
 
-- Quarantine: Quarantine the message. Whether or not the recipient is notified depends on the quarantine notification settings in the quarantine policy that's selected for the policy by the QuarantineTag parameter.
+- Quarantine: Quarantine the message. Whether or not the recipient is notified depends on the quarantine notification settings in the quarantine policy that's selected for the malware filter policy by the QuarantineTag parameter.
 - Reject: The message is rejected in a non-delivery report (also known as an NDR or bounce message) to the sender. The message is not available in quarantine. This is the default value.
 
 This parameter is meaningful only when the value of the EnableFileFilter parameter is $true.

exchange/exchange-ps/exchange/Set-MalwareFilterPolicy.md

@@ -461,8 +461,12 @@ This parameter is available only in the cloud-based service.
 
 The EnableFileFilter parameter enables or disables the common attachments filter (also known as common attachment blocking). Valid values are:
 
-- $true: The common attachments filter is enabled. The file types are specified by the FileTypes parameter.
-- $false: The common attachments filter is disabled. This is the default value.
+- $true: The common attachments filter is enabled. This is the default value.
+- $false: The common attachments filter is disabled.
+
+You specify the file types using the FileTypes parameter.
+
+You specify the action for detected files using the FileTypeAction parameter.
 
 ```yaml
 Type: Boolean
@@ -542,7 +546,7 @@ This parameter is available only in the cloud-based service.
 
 The FileTypeAction parameter specifies what happens to messages that contain one or more attachments where the file extension is included in the FileTypes parameter (the common attachments filter). Valid values are:
 
-- Quarantine: Quarantine the message. Whether or not the recipient is notified depends on the quarantine notification settings in the quarantine policy that's selected for the policy by the QuarantineTag parameter.
+- Quarantine: Quarantine the message. Whether or not the recipient is notified depends on the quarantine notification settings in the quarantine policy that's selected for the malware filter policy by the QuarantineTag parameter.
 - Reject: The message is rejected in a non-delivery report (also known as an NDR or bounce message) to the sender. The message is not available in quarantine. This is the default value.
 
 This parameter is meaningful only when the value of the EnableFileFilter parameter is $true.