Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated Anti-Phishing Policy Standards for more granular configuration #913

Merged
merged 2 commits into from
Jun 28, 2024

Conversation

kakaiwa
Copy link
Contributor

@kakaiwa kakaiwa commented Jun 25, 2024

@KelvinTegelaar
Copy link
Owner

Please see #687 (comment)

@kakaiwa
Copy link
Contributor Author

kakaiwa commented Jun 26, 2024

@KelvinTegelaar Thank you very much for the feedback. I based the default value for these parameters based on the default value that is set when creating a custom policy in Powershell:
https://learn.microsoft.com/en-us/powershell/module/exchange/new-antiphishpolicy?view=exchange-ps

Even without the options I added, the newly created policy uses these default values, so I believe it's not less secure. However, I agree that making the default values as secure as possible is important. If you’d like, I can set the default values for these parameters as below. Please let me know your thoughts on this. Thank you in advance.

  • AuthenticationFailAction: Quarantine
  • SpoofQuarantineTag: AdminOnlyAccessPolicy
  • TargetedUserQuarantineTag: AdminOnlyAccessPolicy
  • TargetedDomainQuarantineTag: AdminOnlyAccessPolicy

@KelvinTegelaar
Copy link
Owner

Sounds good! If you do that, we'll merge.

@kakaiwa
Copy link
Contributor Author

kakaiwa commented Jun 28, 2024

@KelvinTegelaar Thank you for the response. I have updated standards.json so that the first values are set to the above. I would appreciate it f you could merge at your earliest convenience. Thank you in advance.

@KelvinTegelaar KelvinTegelaar merged commit 2470a7d into KelvinTegelaar:dev Jun 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants