Skip to main content

Ensure Safe Attachments policy is enabled

Remediation Considerations​

MaxScoreImplementationCostUserImpact
5UnknownUnknown

Remediation Impact​

Delivery of email with attachments may be delayed while scanning is occurring.

Remediation​

To enable the Safe Attachments policy:

  1. Navigate to Microsoft 365 Defender https://security.microsoft.com.
  2. Click to expand E-mail & Collaboration select Policies & rules.
  3. On the Policies & rules page select Threat policies.
  4. Under Policies select Safe Attachments.
  5. Click + Create.
  6. Create a Policy Name and Description, and then click Next.
  7. Select all valid domains and click Next.
  8. Select Block.
  9. Quarantine policy is AdminOnlyAccessPolicy.
  10. Leave Enable redirect unchecked.
  11. Click Next and finally Submit.