Question

Your organization uses Microsoft Defender for Office 365. Several legitimate marketing emails from a trusted partner containing a specific URL are being blocked because Safe Links flagged the URL as malicious in a prior campaign. Users report they cannot access the link. You need to ensure messages containing this URL are delivered and the link is accessible, using the recommended method with the least administrative effort. What should you do?

Accepted Answer

Add the URL as an allow entry in the Tenant Allow/Block List in the Microsoft Defender portal

Answer

Disable the Safe Links policy that applies to the affected recipients

Answer

Create a mail flow rule (transport rule) that sets the spam confidence level (SCL) to -1 for messages from the partner

Answer

Add the sender's domain to the anti-spam allowed senders list in the connection filter policy