Safe Links and Safe Attachments
Start course

This course shows how to set up Micorosft Defender for Microsoft 365 through a series of practical demonstrations from the Microsoft 365 platform. You will learn about some general cybersecurity practices before being shown how Microsoft Defender can help you implement them.

Learning Objectives

  • Understand how to protect against phishing, malware, and spam using Microsoft Defender
  • Learn about safe links and safe attachments and configure them
  • Learn how to enable zero-day malware protection

Intended Audience

This course is intended for those who wish to learn how to configure protection in Microsoft Defender for Office 365.


To get the most out of this course, you should have a basic understanding of Microsoft 365.


In addition to anti-phishing, anti-malware and anti-spam, Defender for Office 365 also allows you to protect your users against dangerous links and dangerous attachments. This functionality is offered through the Safe Links settings and the Safe Attachment settings. Safe Links provide URL scanning and rewriting of inbound email messages, it also verifies URLs and links in emails and other locations at the time of click. The protection that Safe Link offers is an addition to the regular anti-spam and anti-malware protection that's provided by Exchange Online Protection or EOP.

Safe Links protection is available in email messages, Microsoft Teams and in Office 365 apps. You can use Safe Links policies to control the Safe Links protection that's provided in email messages. It's important to note that there are no default Safe Links policies defined out of the box, so you have to create at least one Safe Links policy if you want to protect against bad links and emails. Safe Links policies can be configured for Teams to protect against bad links in conversations, group chats and channels.

Like email, there are no default Safe Links policies defined out of the box for Teams, so you need to create policies to get this protection. Safe Links protection in office 365 apps is available in supported desktop, mobile and web apps. To configure Safe Links protection for Office 365 apps, you have to use the global settings, which are separate from Safe Links policies.

When you configure Safe Links protection for Office 365 apps using the global settings, that protection is only extended to users who are included in active Safe Links policies. Users who are not included in an active Safe Links policy, do not get Safe Links protection in those supported Office 365 apps.

Now, Safe Attachments is a little different from Safe Links. It's a Microsoft Defender for Office 365 offering that provides additional protection for email attachments that have already been scanned by anti-malware protection in EOP. Safe Attachments checks attachments in email messages before they're delivered to recipients.

Safe Attachments policies are used to configure the safe attachments protection for your email messages. There are no default Safe Attachments policies defined, so you need to create at least one safe attachment policy to get this protection. So the key takeaway here is that you can protect your users against dangerous links and dangerous attachments using Safe Links and Safe Attachments policies. This protection is an addition to anti-malware, anti-phishing and anti-spam protection that's already offered.

About the Author
Learning Paths

Tom is a 25+ year veteran of the IT industry, having worked in environments as large as 40k seats and as small as 50 seats. Throughout the course of a long an interesting career, he has built an in-depth skillset that spans numerous IT disciplines. Tom has designed and architected small, large, and global IT solutions.

In addition to the Cloud Platform and Infrastructure MCSE certification, Tom also carries several other Microsoft certifications. His ability to see things from a strategic perspective allows Tom to architect solutions that closely align with business needs.

In his spare time, Tom enjoys camping, fishing, and playing poker.