office365-exchange-online-protection

1,369 views

Published on

office365-exchange-online-protection

0 Comments
1 Like
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
1,369
On SlideShare
0
From Embeds
0
Number of Embeds
352
Actions
Shares
0
Downloads
22
Comments
0
Likes
1
Embeds 0
No embeds

No notes for slide
  • http://technet.microsoft.com/en-us/library/jj150527%28v=exchg.150%29.aspx
  • http://technet.microsoft.com/en-us/library/jj150527%28v=exchg.150%29.aspx#dlp_establish
  • http://technet.microsoft.com/en-us/library/jj150527%28v=exchg.150%29.aspx#dlp_establish
  • office365-exchange-online-protection

    1. 1. Version 2.0 for Office 365
    2. 2. Jump Start Schedule Day 1 Administering Office 365 Day 2 Administering Exchange Online Office 365 Overview & Infrastructure Lync Online Administration Office 365 User Management Administering SharePoint Online Office 365 DirSync, Single Sign-On & ADFS Exchange Online Basic Management MEAL BREAK Exchange Online Deployment & Migration Exchange Security & Protection Exchange Online Archiving & Compliance
    3. 3. • • • • • • Service Introduction & Overview Spam control Anti-Malware Managing Policy Managing Exchange Security & Policy in Office 365 Mail flow rules, Message Tracing & Delivery Reports
    4. 4. Emergency Operations Plan Ethernet over Power Elevation of Privilege Executive Office of the President Equal Opportunity Program Edge of Pavement English-only Policy Emergency Oxygen Pack Edge of Panic
    5. 5. • Cloud-based email filtering service that: • • • • Replaces Forefront Online Protection for Exchange (FOPE) • • Protects against spam and malware Safeguards organizations from messaging-policy violations Simplifies Exchange messaging environment management All FOPE customers will be migrated to EOP Adds anti-malware protection to Exchange Online
    6. 6. • Exchange Policies that contain sets of conditions to filter email messages • • • made up of transport rules, actions and exceptions Must be activated in the Exchange Administration Center (EAC) to filter live messages Can inform senders they may be about to violate a policy before they even send an offending message • Done through the configuration of policy tips NOTE: DLP is a premium feature that requires an Exchange Online Plan 2 License. Included with ALL Office 365 Midsize business & enterprise plans http://technet.microsoft.com/en-us/library/jj150527%28v=exchg.150%29.aspx
    7. 7. Stop viruses and malware Exchange Online Protection works to block spam and viruses before entering network Basic level of anti-malware built into Exchange Server Protect Sensitive Data Scan Exchange transport for sensitive content with DLP feature in the cloud or on-premises Granular control on email using RMS
    8. 8. Stop viruses and malware Exchange Online Protection provides multi-engine protection Protect sensitive data Scan exchange transport for sensitive content with Data Loss Prevention features Granular control on email using RMS
    9. 9. Protect communications Basic level of built-in anti-malware and enhanced spam filtering to help protect your email environment from threats Enforce policy Data Loss Prevention (DLP) controls that can detect sensitive data in email before it is sent and automatically block, hold or notify the sender Simplify management Unified administration of anti-spam, anti-malware, and DLP within Exchange
    10. 10. Comprehensive protection Multi-engine antivirus Continuously evolving anti-spam protection Built on Forefront Online Protection for Exchange (FOPE) Enterprise-class reliability Geographically load-balanced datacenters Queuing capabilities to help ensure that no mail is lost Common administration console Microsoft Office 365 integration Detailed reporting
    11. 11. DLP helps to identify monitor protect sensitive data through deep content analysis
    12. 12. • • • • • • Service Introduction & Overview Spam control Anti-Malware Managing Policy Managing Exchange Security & Policy in Office 365 Mail flow rules, Message Tracing & Delivery Reports
    13. 13. 1. Connection filtering Blocks up to 80% of all spam, based on IP block/allow lists 2. Sender-recipient filtering Blocks up to 15% of all spam, based on internal lists and sender reputation 3. Content filtering Blocks up to 5% of all spam, based on internal lists and heuristics
    14. 14. Connection filtering Static IP allow/block list Opt-in to Microsoft-maintained reputable sender list Content spam categories Blatant spam High-confidence spam Content filtering actions Delete Quarantine Add X-header Modify subject Redirect
    15. 15. Block email based on language Block external threats quickly Advanced fingerprinting technologies that identify and stop new spam and phishing vectors in real time Enable more control Mark all bulk messages as spam Block email based on geography Block unwanted email based on language or geographic origin
    16. 16. Spam Analysts Email is routed to EOP DC based on MX record resolution (Contoso-com.mail.protection.outlook.com) IP-based edge blocks Envelope blocks Virus Scanning Customer Feedback Policy Enforcement SPAM Protection False +ve / ve Safe Sender/Recipient AV Engine 1 Custom Rules AV Engine 2 Content Scanning and Heuristics SPF & Sender ID Filter AV Engine 3 Bulk Mail Filtering International Spam Quarantine Advanced SPAM Management Corporate Network
    17. 17. Corporate Network Policy Enforcement Content Scanning and Heuristics Outbound Pool SPAM Protection Custom Rules Virus Scanning AV Engine 1 AV Engine 2 Low Score Advanced SPAM Management AV Engine 3 High Score Spam Analysts Quarantine High Risk Delivery Pool
    18. 18. • • • • • • Service Introduction & Overview Spam control Anti-Malware Managing Policy Managing Exchange Security & Policy in Office 365 Mail flow rules, Message Tracing & Delivery Reports
    19. 19. Basic level built in to Exchange Server Simple configuration and monitoring Same antivirus engine as System Center Endpoint Protection Scans through the transport service
    20. 20. Delete messages Delete attachments Robust, customizable notifications Sender notifications Admin notifications
    21. 21. • • • • • • Service Introduction & Overview Spam control Anti-Malware Managing Policy Managing Exchange Security & Policy in Office 365 Mail flow rules, Message Tracing & Delivery Reports
    22. 22. Same rule set as Exchange Transport Rules Includes some new conditions: The sender IP matches any of these addresses Attachment scanning Any attachment has executable content The message contains sensitive information The message size exceeds…
    23. 23. Same rule set as Exchange Transport Rules Includes some new actions: Generate incident report Require TLS encryption Put message in quarantine mailbox Use the following outbound connector…
    24. 24. Same rule set as Exchange Transport Rules Includes some new options: Rules can be configured to run for a specific time period Rules can be run in Test Mode Information Rights Management (IRM) can be applied to messages using a transport rule
    25. 25. Establish policies to protect sensitive data Rules can be run in Test Mode or applied to live email Information Rights Management (IRM) can be applied to messages using a transport rule Methods to create DLP policies • • • Out-of-the-box template supplied by Microsoft Import a pre-built policy file from outside your organization Create a custom policy without any pre-existing conditions http://technet.microsoft.com/en-us/library/jj150527%28v=exchg.150%29.aspx#dlp_establish
    26. 26. • • • • • • Service Introduction & Overview Spam control Anti-Malware Managing Policy Managing Exchange Security & Policy in Office 365 Mail flow rules, Message Tracing & Delivery Reports
    27. 27. • Anti-Malware Policy • Anti-Spam Policy [in] • Content filter Policy • Anti-Spam Policy [out] • Quarantine
    28. 28. • • • • • • Service Introduction & Overview Spam control Anti-Malware Managing Policy Managing Exchange Security & Policy in Office 365 Mail flow rules, Message Tracing & Delivery Reports
    29. 29. http://technet.microsoft.com/enUS/library/ms.exch.eac.NewTransportRule(EXCHG.150).aspx?v=15.0.702.0&l=1&s=BPOS_S_E15_0
    30. 30. Trace
    31. 31. 34

    ×