1. Need to Know Microsoft 365
Webinar
May 2023
@directorcia
http://about.me/ciaops

2. Web cast has started
Web cast is being recorded
If you can’t hear anything check
your speaker settings

3. For questions after the event:
Email : director@ciaops.com
Twitter : @directorcia

5. Webinar recordings at:
www.ciaopsacademy.com
Free access for CIAOPS patrons

6. Please:
- Turn off your mobile
- Turn off your email
- Have somewhere to
take notes

7. Agenda
-Microsoft 365 Update
-Exchange Online Protection
-Q & A

9. News
• MICROSOFT BUILD 2023 Book of News -
• https://news.microsoft.com/build-2023-book-of-news/
• Microsoft Mesh: Transforming how people come together in the modern
workplace -
• https://techcommunity.microsoft.com/t5/microsoft-teams-blog/microsoft-mesh-transforming-how-people-come-
together-in-the/ba-p/3824898
• Bringing the power of AI to Windows 11 – unlocking a new era of productivity
for customers and developers with Windows Copilot and Dev Home -
• https://blogs.windows.com/windowsdeveloper/2023/05/23/bringing-the-power-of-ai-to-windows-11-unlocking-a-
new-era-of-productivity-for-customers-and-developers-with-windows-copilot-and-dev-home/
• Shifting tactics fuel surge in business email compromise -
• https://www.microsoft.com/en-us/security/blog/2023/05/19/cyber-signals-shifting-tactics-fuel-surge-in-business-email-
compromise/
• How Microsoft 365 Copilot works - https://www.youtube.com/watch?v=B2-8wrF9Okc

10. Exchange
Online
Protection

11. Data
Device
Email
Apps
Identity
Service
User
Outlook
BitLocker
MDE
ASR
WIP
MFA
CA
MDO ZAP AIP
ENC
EOP MDO
DNS
Endpoint
Intune
WDAG

12. Email
Microsoft 365 Service
Inbound
Outbound
Spam
Policy
Malware
Policy
Transport
Rules
Spam
Policy
Transport
Rules
Connection
Policy
Exchange Online Protection
Network
Throttling
IP
Reputation
Domain
Reputation
Directory
Filtering
Backscatter
Detection
Envelope
Blocks
Virus
Scanning
Spoof
Intelligence
Policy
Edge protection
Internet
SPF
DKIM
DMARC Virus
Scanning
DLP
Policy
DLP
Policy
User configurable
Message
Encryption

14. Perimeter
Protection
Email is routed to EOP DC based on
MX record resolution
(Contoso-com.mail.protection.outlook.com)
Virus
Scanning
AV Engine 1
AV Engine 2
AV Engine 3
Spam Protection
Safe Sender/Recipient
Policy
Enforcement
Custom
transport rules
Content scanning and
heuristics
Bulk mail filtering
SPF & Sender ID filter
Quarantine
International spam
Advanced Spam
management
Customer
Feedback
False +ve / -ve
Spam Analysts
Corporate Network
or Exchange Online
IP-based edge
blocks
Envelope blocks
Directory based
edge blocks
Advanced Threat
Protection (ATP)
Safe attachments
policy
Safe links policy

15. Connector-Based
Higher Risk
Delivery Pool
High Score
Outbound Pool
Low Score
Spam Protection
Content scanning and
Heuristics
Advanced Spam
management
Virus
Scanning
AV Engine 1
AV Engine 2
AV Engine 3
Policy Enforcement
Custom transport
rules
Spam Analysts
Corporate Network
or Exchange Online
Customer Delivery
Pool
Outlook Safe Sender

16. Multi-Layered protection stack

17. Multi-Layered protection stack

46. https://security.microsoft.com/threatpolicy

47. https://security.microsoft.com/presetSecurityPolicies

48. https://security.microsoft.com/configurationAnalyzer?viewid=Setting

49. https://admin.exchange.microsoft.com/#/reports/mailflowreportsmain

50. https://security.microsoft.com/attacksimulator

52. DEMO

53. Outlook Add Ins

54. New*

55. Resources
• End to End email protection with Microsoft 365–Part 1 -
https://blog.ciaops.com/2020/12/20/end-to-end-email-protection-with-
microsoft-365-part-1/
• Recommended settings for EOP and Defender for Office 365
security - https://docs.microsoft.com/en-us/microsoft-365/security/office-
365-security/recommended-settings-for-eop-and-office365-atp?view=o365-
worldwide
• Mail flow best practices for Exchange Online, Microsoft 365, and
Office 365 (overview) – https://learn.microsoft.com/en-us/exchange/mail-
flow-best-practices/mail-flow-best-practices
• Order and precedence of email protection –
https://learn.microsoft.com/en-us/microsoft-365/security/office-365-
security/how-policies-and-protections-are-combined?view=o365-worldwide

56. CIAOPS Resources
• Blog – http://blog.ciaops.com
• Free Office 365, Azure video tutorials – http://www.youtube.com/directorciaops
• Free documents, presentations, eBooks – http://slideshare.net/directorcia
• Office 365, Azure, Cloud podcast – http://ciaops.podbean.com
• Office 365, Azure online training courses – http://www.ciaopsacademy.com
• Office 365 and Azure community – http://www.ciaopspatron.com
• CIAOPS Github – https://github.com/directorcia
Twitter
@directorcia
Facebook
https://www.facebook.com/ciaops
Email
director@ciaops.com
Skype for Business
admin@ciaops365.com

57. Get access to the latest
information by becoming a
Patron
http://www.ciaopspatron.com

59. That’s all folks!
Thanks for attending