Published October 19, 2021

Microsoft Defender for Office 365: Creating allows in the Tenant Allow/Block List

Reference ID: MC267137 | Effective: November 15, 2021

MC267137 – Updated October 19, 2021: Microsoft has updated the rollout timeline below. Thank you for your patience.

Microsoft understands that, from time to time, you might disagree with an Exchange Online Protection (EOP) filtering verdict. With this update, you will be able to override filtering verdicts using the Tenant Allow/Block List (TABL) in the Defender portal while your submission is being reviewed.

This message is associated with Microsoft 365 Roadmap ID 70591

When this will happen:

Microsoft will roll this out starting in early August and be complete by mid-November (previously mid-October).

How this will affect your organization:

Sometimes, a good message might be marked as bad (a false positive) or a bad message might be allowed through (a false negative).

The first step is to report the message to Microsoft via the Admin Submissions portal.

  • If you feel that you need to immediately allow the message, you can now choose to “Allow these types of messages” when submitting items that you believe should not have been blocked.
  • You will also see a new Sender tab in the Tenant Allow/Block List. Sender allows created during the submission process will be located here, as well as a place for you to add sender blocks.

What you need to do to prepare

To get started, open the Microsoft 365 Defender portal and go directly to the Tenant Allow/Block Lists page. See Learn more below for more detailed steps.

Learn more:

Petri Newsletters

Whether it’s Security or Cloud Computing, we have the know-how for you. Sign up for our newsletters here.