About Policy Assignments for Groups
Policies determine how messages from unverified senders are processed. A policy is assigned to each mailbox.
Name of Available Defend Policy | Description |
|---|---|
Do Not Monitor | Mailboxes with this policy are not monitored or reported on by Defend. Defend has no visibility into any incoming messages into these mailboxes. |
Monitor | Mailboxes with this policy are monitored and reported on by Defend. Defend assesses only the sending email address for every incoming message received by these mailboxes. |
Quarantine | Mailboxes with this policy are monitored and reported on by Defend. Defend assesses only the sending email address for every incoming message received by these mailboxes. Additionally, Defend instantly removes messages received from Unverified senders from the inbox to the Spam or Junk folder. |
Reject | Mailboxes with this policy are monitored and reported on by Defend. Defend assesses only the sending email address for every incoming message received by these mailboxes. Additionally, Defend instantly removes messages received from Unverified senders from the inbox to the Trash or Deleted folder. |
Groups are a convenient way to assign policies to multiple mailboxes. You can imports groups and group memberships as they are defined in a G Suite or Microsoft Office 365 directory. For Microsoft Office 365, only groups of type: Office 365 can be imported into Defend.
In addition, you can create a special group named All Mailboxes. This group includes all mailboxes in a G Suite or Microsoft Office 365 instance.
Policy Assignments Rules for Groups
When you assign policies, you typically assign them to groups with the following results:
Type of Policy | Description |
|---|---|
Default Policy | When a customer account is created, all mailboxes automatically are assigned the Account default policy, which is set to Monitor. |
Group Policy | Setting a policy for a group results in the policy being assigned to all mailboxes in that group. |
Explicit Mailbox-Level Policy | Setting a policy directly for a mailbox, either in a Directory group or from the All Mailboxes group, results in the designated mailbox always retaining the mailbox-level policy regardless of any subsequent policy change to its parent group or to the Account default policy. Explicit mailbox-level policy trumps any other group or account-inherited policy. |
Shared Mailbox Policies | If a mailbox is part of one or more groups, it automatically inherits the policy from the highest priority group unless it has been assigned an explicit mailbox-level policy; in this case, its designated mailbox-level policy is left unchanged. |
Group Inheritance Policy | The Prioritize Groups feature enables groups to be prioritized for policy inheritance. The left-sided table includes all available groups. You can add a group to the right-sided “Prioritized Groups” table and drag-drop to the desired priority position. Any changes to group priorities results in an immediate recalculation of a policy assignment for the specified mailboxes. |
Inheritance Policy for a Mailbox with an Explicitly-Assigned Policy | You can change a mailbox that has an explicitly-assigned policy to inherit a policy from a group by setting its policy to . |
Inheritance Policy for a Group with Mailboxes with an Explicitly-Assigned Policy | A group that has an explicitly-assigned policy may be changed back to inheriting from account by setting its policy to Inherit from Account. |