Office 365 Security & Compliance: Exchange Online Protection Shobhit Sahay Technical Product Manager Levon Esibov Group Program Manager Carolyn Liu Sr Program Manager Ori Kashi Sr Program Manager Vandana Kumbla

EOP Modules Introduction to EOP EOP Architecture How does EOP handle Spam? Exchange Transport Rules Reporting & Message Trace Mail-flow & Connectors Data Privacy

Introduction to EOP

Microsoft Exchange 12/9/2018 Security challenges Rapidly evolving external threats Potential loss of sensitive data Keeping email safe without impacting users © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

using Exchange Online Protection How may I protect my employees from spam and malware my company from data loss using Exchange Online Protection even if I’m not moving my mailboxes to the Cloud?

Exchange Online Protection (EOP) Stop viruses and malware Multi-engine malware protection Continuously evolving anti-spam protection Protect sensitive data Data Loss Prevention features Encryption of sensitive email Common administration console Office 365 integration Detailed reporting Enterprise class reliability Geographically load-balanced datacenters Queuing capabilities to help ensure no mail is lost 24x7x365 Microsoft Support $$$ backed SLA

Exchange Online Protection in numbers Processing Billions of emails a day Using Thousands of servers Used by many 100,000s of customers Used by many 10,000,000s of users Supported by SMEs who wrote the code 24x7x365 Across dozens of Datacenters worldwide Exchange Online Protection - Formerly known as FOPE - Built on the very successful FOPE service Current SLAs 100% protection against all known viruses Capture at least 98% of all inbound spam emails False Positive commitment of less than 1 in 250,000 emails >99.999% Uptime EOP now integrated with office 365 for management and onboarding. Sender Reputation protection by send through a “high risk” pool to ensure protection of Organizations reputation Major Improvements over FOPE: Integrated console Common policy rules ( built on the same stack as Transport Rules ) SPAM improvements

EOP Service Level Agreements Microsoft Exchange 12/9/2018 EOP Service Level Agreements EOP SLA’s: 100% known virus detection 99% spam detection rate False positive ratio of less than 1:250,000 messages 99.999% uptime* Average email delivery time of less than 1 minute* Purchasing EOP: Price: 1$ PUPM Channels: Open, Direct, Syndication, EA, VL *These elements apply to EOP standalone customers, not to O365 customers http://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=37 So what does EOP Offer to the customers? EOP licensed as a standalone Service, ECAL suite, or Exchange Enterprise CAL with Services, you may be eligible for Service Credits if we do not meet the Service Level described below for (1) Uptime and (2) Email Delivery Vurus definition kept up to date © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.