Appendix L: Outlook Add-In

The Outlook Add-In enhances user security awareness and actionability by integrating protection features directly into the Outlook application. The add-in supports the following primary use cases:

• Misdirected Email Prevention

  Identifies and alerts users to potential mistakes when sending emails, such as typos in recipient addresses, lookalike domains, or unauthorized external recipients. See Configuring Misdirected Email Prevention.

  Misdirected Email Prevention requires a DLP license (either the DLP add-on or the Complete Package).

• Report Phishing

  Enables users to report suspicious emails directly from Outlook, contributing to faster threat detection and response. See Check Point Report Phishing Button.

• Email Security Portal Access

  Allows authorized users to quickly access the Email Security Administrator Portal to manage quarantined emails and submit restore requests directly from their inbox. See Accessing the Email Security Portal from Outlook.

Outlook Add-In Permissions

Microsoft may display the following permission requests when users sign in to the Email Security Outlook Add-In:

• Maintain access to data you have given it access to

• View users’ basic profile

The Email Security Outlook Add-In requires only delegated Microsoft identity / OpenID Connect permissions for user authentication and session continuity.

Required Permissions

The Outlook Add-In requires the following scopes:

Scope	Microsoft Permission Display	Purpose
offline_access	Maintain access to data you have given it access to	Used only to maintain the authenticated user session and enable sign-in continuity. This scope does not grant additional access to mailbox data or contacts.
profile	View users’ basic profile	Used only to retrieve basic identity information required for user authentication and the sign-in process.

Permissions Not Required

The Outlook Add-In does not require any Microsoft Graph application permissions and does not request or require permissions such as:

• Mail.Read

• Contacts.Read

• User.Read.All

Configuring the Outlook Add-In

This section explains how to configure and deploy the Outlook Add-In for your organization.

Configuring the Outlook Add-In consists of two main steps:

1. Generating the Add-In XML

2. Deploying the Outlook Add-In through Microsoft 365 Admin Center

Generating the Add-In XML

Administrators can configure the Outlook Add-In from the User Interaction settings in the Email Security Administrator Portal. These settings allow administrators to enable features, customize labels, and define end-user interaction preferences.

To generate the Add-In XML:

1. Access the Email Security Administrator Portal.

2. From the left navigation panel, go to User Interaction > Misdirected Emails.

3. In the Misdirected Emails page, click Add-In Configuration.

4. In the Outlook Add-In Configuration pop-up that appears, configure the following settings.

   

   1. In the Add-In name field, enter a name for the add-in. This appears as the name of the add-in in the Outlook application. To use the default name of the add-in, click Default Label.

   2. In the Select Outlook version section, select your Outlook version.

      • New Outlook

      • Classic Outlook

        Notes: By default, the New Outlook option is selected. The Outlook Add-In is supported in the following Classic Outlook versions. macOS: 16.104 Windows Admin Center: 2511

   3. Configure the Add-In features section:

      1. To enable on-screen warnings before sending an email when a misdirected recipient is detected, select the Misdirected recipients checkbox.

         Note - The Misdirected recipients checkbox is not available on mobile devices.

         1. To show Check Point branding in the warning dialog, enable the Display ‘Powered by Check Point’ toggle.

         2. To allow users to bypass the warning if needed, enable the Allow end users to ignore warnings toggle.

            Note - The Display ‘Powered by Check Point’ and Allow end users to ignore warnings toggles are not available on mobile devices.

      2. To add a Report Phishing button to the Outlook ribbon, select the Report Phishing checkbox.

         • In the Label Name field, enter a name for the button. This appears as the name of the button in the Outlook application. To use the default name of the button, click Default Label.

      3. To add a button that opens the Email Security Portal directly from Outlook, select the Email Security portal checkbox. It allows users to manage quarantined emails and restore requests without re-authentication.

         • In the Label Name field, enter a name for the button. This appears as the name of the button in the Outlook application. To use the default name of the button, click Default Label.

      4. Click Save & Download .xml to download the add-in configuration file.

Deploying the Outlook Add-In through Microsoft 365 Admin Center

After configuring the Outlook Add-In and downloading the .xml configuration file. Upload it to the Microsoft 365 Admin Center to deploy or update the add-in for your users.

For more information, see Deploy Add-Ins in the Microsoft 365 Admin Center.

Notes: Any configuration change requires downloading and re-uploading the updated xml file to the Microsoft 365 Admin Center for the changes to take effect. The Outlook Add-In may appear up to 72 hours after installation.

Outlook Add-In - Supported Outlook Types and Platform

Use Case	Desktop Outlook	Mobile Outlook	Modern Outlook	Classic Outlook
Misdirected Emails	Yes	No	Yes	No
Report Phishing Button	Yes	Yes	Yes	Yes
End User Portal Access	Yes	Yes	Yes	Yes