Snapshot
Office 365 Advanced Threat Protection (ATP) protects against sophisticated threats and automatically investigates and responds to attacks.
Who it's for
Organizations using O365 looking for protection against phishing & zero-day malware attacks & assistance with investigation and remediation.
What is Microsoft Defender for Office 365?
Microsoft Office 365 Advanced Threat Protection (ATP) is a cloud-based email filtering service that helps protect your organization against unknown malware and viruses by providing robust zero-day protection, and includes features to safeguard your organization from harmful links in real time. ATP has rich reporting and URL trace capabilities that give administrators insight into the kind of attacks happening in your organization.
• Protect your organization against advanced attacks such as phishing and zero-day malware
• Gain visibility into the threat landscape and leverage actionable insights to mitigate threats in your organization.
• Leverage the power of automation to quickly and efficiently investigate and remediate threats
• Make users more aware of potential attacks and help them make the right decisions in the event of an attack
What is Microsoft Defender for Office 365?
Microsoft Office 365 Advanced Threat Protection (ATP) is a cloud-based email filtering service that helps protect your organization against unknown malware and viruses by providing robust zero-day protection, and includes features to safeguard your organization from harmful links in real time. ATP has rich reporting and URL trace capabilities that give administrators insight into the kind of attacks happening in your organization.
• Protect your organization against advanced attacks such as phishing and zero-day malware
• Gain visibility into the threat landscape and leverage actionable insights to mitigate threats in your organization.
• Leverage the power of automation to quickly and efficiently investigate and remediate threats
• Make users more aware of potential attacks and help them make the right decisions in the event of an attack
Profile Microsoft Defender for Office 365
| Category | Email Security |
| Website | microsoft.com |
| Founded | 1975 |
| Headquartered | Redmond, WA |
| Deployment | Cloud via O365 Portal |
| Starting Price | $2 or $5 user/month |
| Suitable For | Office 365 customers looking for robust protection and automated response |
Microsoft Defender for Office 365 Features
- Automatically checks all email attachments for malicious content
- Provides time-of-click verification of URLs within email messages and Office files
- Identifies and blocks malicious files in team sites and document libraries, such as SharePoint, OneDrive and Microsoft Teams
- Anti-phishing protection detects attempts to impersonate your users and domains using machine learning and advanced algorithms
- Threat Explorer is a real-time report that allows you to identify and analyse recent threats (E2)
- Attack Simulator allows you to run realistic attack scenarios in your organization to identify vulnerabilities, such as spear-phishing attacks and password-spray attacks (E2)
- Automated Incident Response (AIR) capabilities include a set of security playbooks that can be launched automatically, saving security operations teams time and effort (E2)
- Built into Office 365: Native integration with Office 365 reduces the investments to integrate with existing solutions. Built-in security helps retain user productivity and ensure a rich and smooth user experience.
Resources
Expert Insight
Microsoft Advanced Threat Protection offers businesses an extra layer of protection against malicious threats and phishing attacks. It’s low cost, easy to deploy and easy to manage as it’s fully integrated with Office 365. The machine learning and impersonation detection systems offer businesses a basic level of protection against phishing attacks. However. In October 2017, researchers announced that Microsoft had missed 34,000 phishing emails, demonstrating that it is not the most effective phishing protection platform.
For this reason, Microsoft ATP should not be used alone to protect businesses from phishing or targeted social engineering attacks. If you are planning to use this solution as an extra layer of security, we also recommend using a dedicated third party security solution in our Post – Delivery Protection category. These solutions will be more effective to stop phishing attempts and business email compromise.
User Reviews
Systems Analyst
Existing Customer
Manufacturing, 100-250 employees
Used the product for: Less than 6 months
May 08, 2019
"Good extra layer of security for email, and some useful functionality, but not a catch-all email security solution"
What did you like best when using this solution?It's a good low cost solution that we use for link URL rewriting. It's also really useful to detect viruses in OneDrive. There are some useful features, but the main benefit of this solution is that it added an extra layer of protection for our O365 email suite.
What did you dislike about using this solution?It still let in phishing emails regularly. The solution is not as powerful as third party vendors and still let in some security threats.
Describe your overall experience with Microsoft Defender for Office 365. Did you find this product solved your business needs?We chose Microsoft ATP as an extra layer of defense for our emails. The solution is reasonably priced and easy to get set up. It adds some sufeul security features like URL protections and looking for threats in OneDrive. But the main problem is that it still lets in phishing emails.
Profile Microsoft Defender for Office 365
| Category | Email Security |
| Website | microsoft.com |
| Founded | 1975 |
| Headquartered | Redmond, WA |
| Deployment | Cloud via O365 Portal |
| Starting Price | $2 or $5 user/month |
| Suitable For | Office 365 customers looking for robust protection and automated response |