Description:
Verifies that Safe Lists are not enabled.
Why:
Messages sent from allowed safe list addresses bypass important security mechanisms, including spam filtering and sender authentication checks. Avoiding use of safe lists prevents potential threats from circumventing security mechanisms. While blocking all malicious senders is not feasible, blocking specific known, malicious IP addresses may reduce the threat from specific senders.
Configured: Safe Lists are not enabled.
Not Configured: Safe Lists are enabled.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Exchange
Microsoft Licensing: Works with Basic licensing
Remediation in Augmentt: No in-product remediation — remediate in the Microsoft admin portals.
Compliance Frameworks:
CIS Microsoft 365 Benchmark v6 (Level 1) — 6.2.2
CIS Microsoft 365 Benchmark v7 (Level 1) — 6.2.2
Microsoft documentation: