Office 365 Email - Phishing, Spoofing and SPAM

[phughes]

Office 365 default filters are poor (to be kind). I know there is Office 365 ATP that you can subscribe to on Education A5, but that is mega 'spensive.

 

I wonder if any of you guys use a third party email filter, before the emails get to 365? Barracuda was mentioned on another forum.

 

Any thoughts, advice, experiences with 3rd party filter?

 

Cheers

[chaplic]

I've not heard that opinion from others. Do you have SPF and DMARC setup as O365 is quite fastidious about rejecting bad SPF (And some spammers may pretend to be you).

[charlie13561]

We also use Office 365, we do have the SPF record set up, I have also asked for a DMARC records as it is also a DNS Text record but its not something RM provide at the moment. Can I ask everyone that has a Domain registered with RM to request a NEW IDEA (RM Unify launch pad) of setting up the DMARC as standard for school domains. Hopefully this will help reduce the numbers of spam and fishing emails that have been on the increase lately.

[Uber22]

We have the same issue since moving to office 365 our spam intake has tripped. We have dmarc setup but doesn't really make a difference.

 

All I did is set the spam level higher and set the spam notification to daily. It's a pain but stop lots of those email coming in.

 

We are like you budget is limited, I was looking at or firewall Sophos UTM I think has some kind of email scanning but I have not yet looked at this

[Boredguy]

@charlie13561 what do you mean that RM will not add the DNS record for you? They must have done so already to setup DKIM and SPF when you setup your 365 tenancy? If you are using RM via the SWGfL, you can request self service DNS from them to do the DMARC and other records without having to raise service calls all the time.

[charlie13561]

that's good to know that we can request self service DNS, I am aware we have the other records set up as I requested them when we moved to office 365, I have just become aware of the DMARC record so asked for that and was told

 

"My 3rd line colleagues have reviewed this and they have confirmed DMARC setup isn't a Office 365 tenancy configuration service that RM can offer at the moment. That has already been submitted as a product improvement suggestion from here; allow this to be considered for future product development. As with any suggested improvement, the more people that ask for something specific, the better, so if I could ask you to submit this as a product improvement suggestion via the Ideas link in the help section of the RM Unify Launch Pad, that would be great."

 

only trying to make people aware if they have education office 365 with lots of spam and fishing

[Boredguy]

If you are on SWGfL, just log a dns record request via the ESI portal. Having a default dmarc record created automatically wouldn't be ideal as how would they know which address you want the rua and ruf messages to go to?