Exchange Online Protection, the established name for the security built into every cloud mailbox in Exchange Online: filtering against malware, spam and spoofing. Defender for Office 365 adds to it.
Also called Exchange Online Protection.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains EOP in context, with comparison tables and the common traps.
Terms in this definition
- AMPRS
An acronym for availability, manageability, performance, recoverability and security: the five design qualities used to sort non-functional requirements and to weigh up trade-offs between design decisions.
- Exchange Online
Microsoft 365's hosted service for mail, calendars and contacts. Defender for Office 365 protects these mailboxes.
- Spoofing
A message whose From address uses a domain other than its real origin is spoofed. This differs from impersonation, where the identity merely looks similar; anti-phishing policies handle each.
- Microsoft 365
Formerly Office 365, Microsoft's software-as-a-service productivity suite. A Microsoft Entra tenant provides its identity, and its data is not governed by Azure RBAC.
Related terms
- Anti-malware policy
Scans mail attachments for malware as part of Exchange Online Protection, sending anything infected to quarantine. The common attachments filter may reject chosen file types, and you can add custom policies for particular users, groups or domains on top of the default.
- Anti-spam policy
Exchange Online Protection uses this policy to filter junk both arriving and leaving. Every cloud recipient falls under the default; custom versions can aim at users, groups or domains. Among the possible verdict actions is quarantine, held for between 1 and 30 days.
- Honor DMARC record policy
When on, the DMARC policy that a sending domain publishes determines how a message is handled, in Defender for Office 365 and Exchange Online Protection anti-phishing. A different action can be chosen for p=quarantine than for p=reject.