Re: Microsoft ATP anyone?

["Swick, Forrest" <Forrest.Swick () UNCO EDU>]

We have O365 and are activating ATP shortly... Mildly disappointed that the SafeLinks are not enabled between internal 
senders / recipients... No promise from MS on our end that this functionality will ever be available ... The rumor I 
heard was that it is too taxing on resources for internal messaging....

Would be a nice "Promised" feature...

--Forrest

Forrest H. Swick, CISSP
Senior Security Engineer
Office of Information Security
Information Management & Technology

[cid:image006.jpg@01D0BFC0.B03A9640]
University of Northern Colorado
Carter Hall 3008B
501 20th Street
Campus Box 19
Greeley, CO 80639

O: 970-351-1379
C: 970-397-1343
F: 970-351-1650
unco.edu<http://www.unco.edu/>

Once a Bear, Always a Bear!

UNC Technical Support? Please dial 970.351.4357 / 800.545.2331
To receive online assistance visit http://help.unco.edu<http://help.unco.edu/>


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
Keenan,Paul
Sent: Monday, July 31, 2017 3:19 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Microsoft ATP anyone?

Drexel recently finished migrating to O365 and we do have ATP, although it is not yet enabled for all users.   Where it 
is enabled it seems to perform as advertised.  One issue we've had is that Safelinks are not enabled between internal 
senders and recipients.  This has been an issue because we saw a big uptick in internal PHISHing from compromised 
accounts shortly after we finished migrating.  MS promises this functionality will be available within a few weeks.

Paul

Paul Keenan, Executive Director of Systems & Security
Information Technology
Drexel University
Philadelphia, PA
P:215-895-1785
paul.keenan () drexel edu<mailto:paul.keenan () drexel edu>








Sensitivity: Internal
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jason 
Youngers
Sent: Monday, July 31, 2017 4:43 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Microsoft ATP anyone?

Greg,
   We're considering both the Office 365 Advanced Threat Protection (ATP) and Windows Defender Advanced Threat 
Protection (ATP) it at Ithaca College, but we haven't yet been able to get solid pricing from Microsoft on those 
products. Have you looked into it further? Is anyone else using these or considering them?

Thanks,
Jason

Jason A. Youngers
Director & Information Security Officer
Information Technology
Job Hall 309

Ithaca College
953 Danby Road, Ithaca, NY 14850
jyoungers () ithaca edu<mailto:jyoungers () ithaca edu>  | 
http://www.ithaca.edu/it/<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.ithaca.edu%2Fit%2F&data=02%7C01%7Cpmk25%40drexel.edu%7C1ae1efebf2f24d2d58a408d4d8562962%7C3664e6fa47bd45a696708c4f080f8ca6%7C0%7C0%7C636371311953264525&sdata=nOr3NNoLq2TAncI0o1q%2BF2A17sicWbg0lwlDcqx2uTE%3D&reserved=0>


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Greg 
Williams
Sent: Thursday, June 01, 2017 3:28 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Microsoft ATP anyone?

Hi all, We are once again considering Microsoft ATP for email.  When we switched from on-prem to Office 365, and 
removed Proofpoint, we really didn't notice that much of an impact on the amount of spam that we were receiving.  
Students are still falling for phishing.

Is anyone using ATP or has used ATP?  Is so, can you share insight?  Thank you!
Greg Williams, ME

Director of Networks and Infrastructure
Information Technology
Adjunct Faculty - Department of Computer Science
College of Engineering and Applied Science

University of Colorado Colorado Springs
1420 Austin Bluffs Parkway, (EPC 136A)
Colorado Springs, CO 80918
www.uccs.edu<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.uccs.edu%2F&data=02%7C01%7Cpmk25%40drexel.edu%7C1ae1efebf2f24d2d58a408d4d8562962%7C3664e6fa47bd45a696708c4f080f8ca6%7C0%7C0%7C636371311953264525&sdata=IC25HXm3e0P64o6yXOG1cSK66R%2Fs6g2m%2FudNZJ6BtdY%3D&reserved=0>


**This message originated from outside UNC. Please use caution when opening attachments or following links. Do not 
enter your UNC credentials when prompted by external links.**