Office 365 Mail Security Settings

Quarantine Settings

For details about quarantine, see Managing Quarantine.

Notification Templates and Senders

The content for notifications sent to internal and external end users are controlled through the Office 365 Mail configuration page.

To configure the notification templates:

  1. Navigate to Security Settings > SaaS Applications > Office 365 Mail.

  2. Click Configure for Office 365 Mail.

  3. Scroll down to the end and expand Advanced.

  4. Select the template and make the changes.

Note - Some notifications can be customized from the policy. For more details, see Configuring a Threat Detection Policy Rule and Data Loss Prevention (DLP) Policy and Click-Time Protection Policy.

Available configurable templates

  • Quarantine notification `From`

  • Quarantine notification `Reply-To`

  • Quarantine notification subject

  • Quarantine notification body

  • Phishing quarantine notification body

  • Quarantined notification (admin restore request)

  • Restore request subject

  • Restore request body

  • Decline message subject

  • Decline message body

  • Threat extracted message format

  • Threat extracted attachment name template

  • Phishing quarantine notification subject

  • Phishing quarantine notification body (admin restore request)

  • Phishing decline message subject

  • Phishing decline message body

  • Spam quarantine notification body

  • Spam quarantine notification subject

  • DLP quarantined notification body (admin restore request) - Outbound

  • DLP quarantined notification body (admin can restore)

  • DLP quarantined notification body (user can restore) - Outbound

  • DLP restoration notification body - Outbound

  • Restore notification subject

  • Added header key

  • Added header value

  • Sender (Envelope From) to use in an alert sent to quarantine inbox

  • Email to use as `Reply-To` in an alert sent to quarantine inbox

  • Report Phishing approve subject

  • Report Phishing approve body

  • Report Phishing decline subject

  • Report Phishing decline body

  • Outgoing spam quarantine notification body

  • Outgoing phishing quarantine notification body

  • Outgoing phishing quarantine notification body (admin restore request)

  • Outgoing quarantine notification body

  • Outgoing quarantined notification (admin restore request)

  • DLP quarantined notification body (admin restore request) - Inbound

  • DLP quarantined notification body (user can restore) - Inbound

  • DLP restoration notification body - Inbound

  • DLP alert subject to external sender - Inbound

  • DLP alert body to external sender - Inbound