Overview
This article provides an overview of Cloud Protection features for users of Microsoft 365 who are considering security measures for items in Microsoft 365.
Notes
- The seminar videos and materials presented on this page are based on information available at the time the seminar was held.
- As of March 2022, F-Secure, as stated in the seminar videos and materials, has been rebranded as WithSecure.
- The content of this article is based on product specifications as of November 2026 and may be changed without prior notice.
Table of Contents
Feature Overview
Cloud Protection is a cloud service that protects information in Microsoft 365 from malicious content and URLs.
Malware Blocking
Malicious content can be scanned in real time, and viruses, trojans, ransomware, and other advanced malware can be quarantined.
URL Protection
Information in Microsoft 365 is scanned in real time, and Cloud Protection checks the reputation of URLs contained in the message body.
If a website linked by a URL is determined to be malicious, items containing the applicable URL can be quarantined or deleted, or the URL can be disabled.
Compromised Account Detection
If a combination of an email address and password for a specific account is leaked, a third party may use that account to infiltrate the organization and launch phishing activities, ransomware attacks, or unauthorized access to information by impersonation within the organization.
Attacks using such compromised accounts are difficult to detect because they are carried out using legitimate user accounts within the organization.
The Compromised Account Detection feature of Cloud Protection monitors users' email addresses using external information sources and sends notifications when compromised accounts are found to be publicly exposed.
It also provides information about the severity of the compromise and the likelihood that those accounts may still be abused, based on the type of compromised information.
Inbox Rule Scanning
The Outlook Inbox Rule Scanning feature automatically detects specific malicious actions configured for incoming emails.
After accessing a mailbox, attackers create inbox rules to carry out various types of attacks, such as automatically forwarding or deleting emails.
The Inbox Rule Scanning feature analyzes all inbox rules in a mailbox. This analysis helps detect suspicious rules that may indicate account compromise.
It can also notify mailbox owners and administrators to take action.
Notes and Limitations
-
For Microsoft 365 plans supported by Cloud Protection, refer to the following link.
Elements Collaboration Protection System Requirements (External Link) -
For information about the types of threats that can be detected in the connected Microsoft 365 environment, refer to the following article.
[Cloud Protection] Reviewing Operational Policies - After connecting to Microsoft 365, existing information, such as emails containing suspicious files in mailboxes, will not be quarantined or deleted.
- After connecting to Microsoft 365, verify that Cloud Protection is quarantining emails received in Microsoft 365 (Exchange Online).
-
When verifying OneDrive operation, upload the quarantine test file twice and confirm that the file is quarantined.
(This is a known issue caused by Microsoft API specifications. This procedure addresses an issue in which malware may not be detected when the first file is scanned after connection.)
Reference (Webinar Archive Video)
Understand Cloud Protection in 15 Minutes!
The archived video of the webinar, "Understand Cloud Protection in 15 Minutes!", held on May 31, 2023, is now available. This webinar clearly explains the background of current security trends, an overview of product features, and demonstrations. Please watch it.
User Guide
For the Cloud Protection user guide, refer to the following article.
HENNGE Cloud Protection User Guide
Translation Disclaimer
This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.
In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.