Skip to Content

Anti-Malware

Configure Exchange Online Protection anti-malware policies. Scan inbound and outbound email for malicious attachments.

Policy Settings

SettingDescription
Common attachments filterBlock known malicious file types
Zero-hour auto purgeRemove malware from delivered messages
Admin notificationsAlert when malware detected
Custom file typesAdditional file extensions to block

Default Blocked File Types

Executable files (.exe, .bat, .cmd, .ps1), script files (.js, .vbs), and other high-risk attachment types are blocked by default.

Actions

  • Quarantine — Move message to quarantine (default)
  • Reject — Reject the message with NDR
  • Delete — Silently delete the message

Safe Attachments Integration

For E5 licenses, Safe Attachments provides additional sandboxing of suspicious attachments beyond the anti-malware filter.

API Reference

  • GET /api/security/anti-malware/policies — List policies
  • PUT /api/security/anti-malware/policies/:id — Update policy
Last updated on