MC424901 – Safe Attachments policy: Retire policy action ‘Replace’ for malware detections in attachments (Phase 1)

Microsoft Exchange Logo

check before: 2022-09-16

Product:

Defender, Exchange, Microsoft 365 Defender

Platform:

Online, World tenant

Status:

Change type:

Admin impact, Retirement

Links:

Details:

In Safe Attachments policies, ‘Replace’ is one of the actions that can be applied to messages that are found to contain malware. This action delivers only the message body without any of the original attachments. A replacement text attachment is added to the message to notify that the attachments were removed due to malware detection.
The ‘Replace’ action will be retired and will no longer be available in Safe Attachments policies. This retirement is implemented in two phases.
The first phase will start applying the ‘Block’ action behavior (quarantine the email) to existing policies with the ‘Replace’ action. This change will be applied automatically.
The second phase will remove the ‘Replace’ action selection from the Microsoft 365 Defender portal and related cmdlets. As part of this change, the ‘Replace’ action in any existing policies will be changed to the ‘Block’ action.

Change Category:
XXXXXXX ...

Scope:
XXXXXXX ...

Release Phase:

Created:
2022-09-03

updated:
2022-09-03

the free basic plan is required to see all details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.


Login to your account

Welcome Back, We Missed You!