M365 for email security?

Posted by Proper_Ad1119@reddit | sysadmin | View on Reddit | 6 comments

Hello everyone, We are currently looking at M365 for email security and wondering what everyone's thoughts are. Anywhere where Microsoft could improve a little? How are they in terms of BEC/DLP and phishing? And user awareness training? If someone could be brutally honest and let me know the negatives so we can make an informed decision Thankyou!

Reply to Post

6 Comments

[-]

Weak-Layer-6161@reddit

M365 is fine for mail security; it does the job for you. I would opt for another option in the SAT. There are several solid options on the market, and IMO, BullPhish ID is one of the best.

[-]

ClimatedIT@reddit

We used M365 for mail security, which was a good choice. Then, we grew and opted for Graphus, a slightly more robust spam filter that works great for us. For awareness training, we use BullPhish ID, which has helped us a lot, not only with its reports but also with its very good simulations. Initially, it was hard to get used to the simulations, and we always fell, but as time went by, we improved a lot, and now most of them manage to identify malicious emails.

[-]

iamnewhere_vie@reddit

The big advantage with M365 and eMail security is = the huge amount of eMails they handle, if there is anything new bad stuff going around, it's high likely that it'll also reach a M365 customer. The filters at MS can learn from this and filter more efficient. To enhance that, you can combine it with another mail scanner with M365 connector. With O365 Advanced Thread Protection (has now new name - i think something with "Defender") you get also important features like safe-link and mails are checked some time after arrival again in case attackers activate their phishing website some time after attack trying to avoid being detected by scanners. You just have to be realistic = the defenders are always a step behind, so there is always something new out there which can pass by any detection - that's why having a different mail filter would enhance the eMail security even if you are already at M365. Didn't try the phishing campaigns from M365 so far as we use KnowB4 but i guess it works similar and this trainings are the most important protection you can have - attackers can find always ways through the filters from M365 and well trained users are your last line of defense.

[-]

BulletRisen@reddit

Jheeze

[-]

Efficient_Reading360@reddit

Big “do my homework for me” vibes

[-]

iama_bad_person@reddit

We use 365 and for phishing training we use KnowB4. Microsoft has pretty robust DLP tools. You can define the sensitive data and it's format/pattern yourself and let it scan files and emails for it. For example you can tell it not to let any emails with CC numbers, SS numbers etc be sent and also warn you if any of this data is saved anywhere in Sharepoint or users OneDrives. BEC is more of a user training issue than anything else. For example we use KnowB4 for user phishing training. On top of this we tag all external emails as being external with a red banner, and if Microsoft has a reason to think an email isn't sent by the actual person then it will tag it as possibly not being from the person either. Finance won't send money to new bank accounts for no reason.