Stop internal emails from being reported to sec ops mailbox
Our users are paranoid about phishing at this point and many report emails from other employees. Because of sensitivity of some of our information, it can’t be reported to Microsoft. So, we have to have an admin wade through all the user reported messages and weed out the ones that don’t have [External] in the subject. This wastes a lot of time for our admins. I even tried a mail flow rule to delete anything that didn’t have [External] in the subject from going to the submission mailbox and it did delete the message silently, but it still shows up in the user reported messages portal and we have to sort through it. Is there any other way to stop those messages from showing up in the portal?
PS. This wasn’t an issue until recently because we used to be able to put [External] in the name filter and it would act like a wild card, but that has stopped working.
Our users are paranoid about phishing at this point and many report emails from other employees. Because of sensitivity of some of our information, it can’t be reported to Microsoft. So, we have to have an admin wade through all the user reported messages and weed out the ones that don’t have [External] in the subject. This wastes a lot of time for our admins. I even tried a mail flow rule to delete anything that didn’t have [External] in the subject from going to the submission mailbox and it did delete the message silently, but it still shows up in the user reported messages portal and we have to sort through it. Is there any other way to stop those messages from showing up in the portal? PS. This wasn’t an issue until recently because we used to be able to put [External] in the name filter and it would act like a wild card, but that has stopped working. Read More