Microsoft 365
TMA-M365-6.2.3
Ensure email from external senders is identified
Açıklama
External callouts provide a native experience to identify emails from senders outside the organization. This is achieved by presenting a new tag on emails called "External" (the string is localized based on the client language setting) and exposing related user interface at the top of the message reading view to see and verify the real sender's email address. The recommended state is ExternalInOutlook set to Enabled True Tagging emails from external senders helps to inform end users about the origin of the email. This can allow them to proceed with more caution and make informed decisions when it comes to identifying spam or phishing emails. Mail flow rules are often used by Exchange administrators to accomplish the External email tagging by appending a tag to the front of a subject line. There are limitations to this outlined here. The preferred method in the CIS Benchmark is to use...
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
To audit using PowerShell: 1. Connect to Exchange online using Connect-ExchangeOnline. 2. Run the following PowerShell command: Get-ExternalInOutlook 3. For each identity verify Enabled is set to True and the AllowList only contains email addresses the organization has permitted to bypass external tagging.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
To remediate using PowerShell: 1. Connect to Exchange online using Connect-ExchangeOnline. 2. Run the following PowerShell command: Set-ExternalInOutlook -Enabled $true
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- m365saas
- Referans
- CIS Microsoft 365 Foundations Benchmark v7.0.0 - 6.2.3 Ensure email from external senders is identified