Additional Spam and Phishing Protection — Exchange Online Email Security

Additional Spam and Phishing Protection is a 5-day IT Partner service for organizations using Exchange Online that are experiencing spam, phishing, or email spoofing issues. IT Partner implements DKIM and DMARC, checks and corrects SPF if needed, assigns Microsoft Defender for Office 365 (formerly Exchange Online Advanced Threat Protection) licenses to users, and configures a country block list to strengthen email protection.

This service is designed for organizations that use Exchange Online and need additional protection against spam, phishing, malware-related email threats, or spoofing of their company domain. Exchange Online is a prerequisite, because the engagement is based on configuring protection features and licensing within that environment.

The service includes DKIM implementation, DMARC implementation, SPF record review and correction if needed, assignment of Microsoft Defender for Office 365 licenses to users, and configuration of a country block list. These deliverables are intended to reduce spam and phishing exposure while keeping mail flow working.

Microsoft Defender for Office 365 licenses (formerly Exchange Online Advanced Threat Protection) are not included in the service price. IT Partner assigns the licenses to users as part of the engagement, but the customer must have or obtain the required licenses separately.

The stated duration for Additional Spam and Phishing Protection is 5 days. The plan may vary depending on the organization’s needs, so exact scheduling and sequencing should be confirmed with IT Partner during the kickoff.

The service is $800 per project, quoted fixed-price in writing before work begins. The price covers the defined implementation scope; Microsoft Defender for Office 365 licenses are not included.

No filtering service can guarantee that every unwanted or malicious email is blocked — attackers continuously change tactics. This engagement meaningfully decreases the volume of spam and phishing messages by implementing the planned protection features and reducing risk within the defined scope.

DKIM and DMARC help reduce the ability of attackers to send phishing messages that appear to come from your company’s domain. This is especially valuable for limiting spoofed messages, including messages that may appear to be sent to your own users on behalf of company employees.

Yes, IT Partner checks the SPF record and corrects it if needed. SPF is part of the domain email authentication review, while the client is responsible for performing required internal or external DNS changes.

The stated success criteria include that mail workflow is not broken. However, because DNS, authentication, and protection settings can affect mail behavior, IT Partner verifies the implementation and fixes issues as part of the engagement.

The country block list is configured to enhance mail protection by blocking mail receipt based on regional data. This can help reduce exposure to attacks from countries identified as having increased viral activity, within the limits of the configured protection approach.

The client must coordinate internal resources and staff schedules, provide a dedicated point of contact, coordinate any outside vendor resources, and review and approve deliverables in a timely manner. The client is also responsible for DNS changes and for configuring network equipment such as load balancers, routers, firewalls, and switches if required.