Microsoft Defender for Office 365: Upcoming Changes to Intra-Org Messages
Microsoft will be updating the way intra-organizational SCL ratings are assigned for intra-organizational messages.
When this will happen:
Changes to logging intra-organizational messages will begin rolling out in early April and is expected to be complete by late June.
How this will affect your organization:
All intra-organizational messages are currently marked with SCL -1 (bypass spam filtering). The updated method will assign an SCL rating based on the content and type of intra-organizational message. The ratings are SCL 1 for non-spam and SCL 5 through 9 for spam. This change will not change the way the messages are delivered.
This document describes the updated function of the
SFV:SKI field in the X-Forefront-Antispam-Report.
What you need to do to prepare:
At this time, there are no additional actions for admins to take. Changes to intra-organizational message logging will be reflected in Threat Protection Status (TPS) and Mail Flow reports.