Required Configuration for Phishing Simulation emails

  • Home |
  • Required Configuration for Phishing Simulation emails
Microsoft Exchange Curtain Reveal Tech Bulletin Header

MC674418 · Exchange Online, SharePoint Development

From Microsoft Corporation
Technical Bulletin MC674418 · Published Sep 8, 2023

Message Summary

Exchange online protection (EOP)/ Defender for Office 365 (MDO) customers who want to send phishing simulation emails, need to configure advance delivery policy for optimal behavior. This policy will ensure that emails that match your conditions are delivered unfiltered to the Inbox and that safe links time of click protection and post-delivery actions are disabled. Previously, EOP supported this scenario for some phishing simulation vendors by honoring admin configured Exchange transport rules stamping SCL -1 or the header (X-MS-ExchangeOrganizationPhishTraining). But this was a temporary solution and will be discontinued soon. We advise all customers who use phishing simulation products to configure advance delivery policy for a smooth product experience.

How this will affect your organization:

If you are using a 3rd party phishing simulation product and haven’t configured advanced delivery policy, you might notice these emails getting quarantined. 

What you need to do to prepare:

Instead of using mail flow transport rules, we recommend using Advance Delivery Policy  

Additional information

Recent Comments

No comments to show.

Recent Posts

Microsoft 365 Curtain Reveal Tech Bulletin Header
New Outlook for Windows: Auto-reading emails with Microsoft Windows Narrator
October 14, 2024
Microsoft 365 Curtain Reveal Tech Bulletin Header
(Updated) Microsoft Purview: Minor encrypted message portal design updates, URL to remain the same
October 14, 2024
Microsoft Exchange Curtain Reveal Tech Bulletin Header
(Updated) Microsoft Defender for Office 365: Tenant Allow/Block List will support IPv6 allow and block entries
October 14, 2024