MDO: Safe Attachments policy: Deprecate policy action ‘Replace’ for malware detections in attachments (Phase 2)

In an effort to improve Safe Attachment policies, Microsoft is retiring the 'Replace' action from the policy and replacing it with the 'Block' action. As part of Phase 2 of this change, selecting the 'Replace' action will no longer be available via Microsoft 365 Defender portal and cmdlets. All policies configured with the 'Replace' action will be automatically changed to the 'Block' action once the change is rolled out, starting in mid-April 2023 until mid-May 2023 (worldwide deployment) and mid-June 2023 until late-June 2023 (government clouds deployment). This change is designed to ensure a safer attachment environment, as the 'Block' action is a more secure option for malware detections in attachments. No action is needed from users, and all policies with the 'Replace' action will be updated to the 'Block' action. To learn more about Safe Attachments in Microsoft Defender for Office 365, please follow the provided link.

Message ID: MC525759

The post MDO: Safe Attachments policy: Deprecate policy action 'Replace' for malware detections in attachments (Phase 2) appeared first on M365 Admin.