Additional Spam and Phishing Protection — Exchange Online Email Security

Additional Spam and Phishing Protection is a 5-day IT Partner service for organizations using Exchange Online that are experiencing spam, phishing, or email spoofing issues. IT Partner implements DKIM and DMARC, checks and corrects SPF if needed, assigns Exchange Online Advanced Threat Protection licenses to users, and configures a country block list to strengthen email protection.

This service is designed for organizations that use Exchange Online and need additional protection against spam, phishing, malware-related email threats, or spoofing of their company domain. Exchange Online is a prerequisite, because the engagement is based on configuring protection features and licensing within that environment.

The service includes DKIM implementation, DMARC implementation, SPF record review and correction if needed, assignment of Exchange Online Advanced Threat Protection licenses to users, and configuration of a country block list. These deliverables are intended to reduce spam and phishing exposure while keeping mail flow working.

Exchange Online Advanced Threat Protection licenses are not included in the service price. IT Partner assigns the licenses to users as part of the engagement, but the customer must have or obtain the required licenses separately.

The stated duration for Additional Spam and Phishing Protection is 5 days. The plan may vary depending on the organization’s needs, so exact scheduling and sequencing should be confirmed with IT Partner during the kickoff.

The listed price for Additional Spam and Phishing Protection is 500. This price covers the defined implementation service scope, but it does not include Exchange Online Advanced Threat Protection licenses.

The SKU for Additional Spam and Phishing Protection is ITPWW380IMPOT. This can be used when referencing or ordering the service with IT Partner.

The listed manager for this service is Roman Sotnik. Prospective customers should confirm current contact and scheduling details with IT Partner when initiating the engagement.

The engagement starts with a kickoff meeting, followed by implementation of the additional protection settings and services. IT Partner then verifies the configuration, fixes issues if needed, and gathers feedback before completion.

The service is intended to decrease the number of spam and phishing messages, but it does not state a guarantee that all unwanted or malicious email will be blocked. Email attackers continuously change tactics, so the engagement focuses on implementing scheduled protection features and reducing risk within the defined scope.

DKIM and DMARC help reduce the ability of attackers to send phishing messages that appear to come from your company’s domain. This is especially valuable for limiting spoofed messages, including messages that may appear to be sent to your own users on behalf of company employees.

Yes, IT Partner checks the SPF record and corrects it if needed. SPF is part of the domain email authentication review, while the client is responsible for performing required internal or external DNS changes.

The client is responsible for performing changes to internal and external DNS as required. IT Partner checks and corrects SPF if needed and implements DKIM and DMARC, but DNS updates may require customer-side access, approval, or execution.

The stated success criteria include that mail workflow is not broken. However, because DNS, authentication, and protection settings can affect mail behavior, IT Partner verifies the implementation and fixes issues as part of the engagement.

The country block list is configured to enhance mail protection by blocking mail receipt based on regional data. This can help reduce exposure to attacks from countries identified as having increased viral activity, within the limits of the configured protection approach.

The client must coordinate internal resources and staff schedules, provide a dedicated point of contact, coordinate any outside vendor resources, and review and approve deliverables in a timely manner. The client is also responsible for DNS changes and for configuring network equipment such as load balancers, routers, firewalls, and switches if required.

IT Partner is responsible for implementing DKIM and DMARC, assigning Exchange Online Advanced Threat Protection licenses to users, checking and correcting the SPF record if needed, and configuring the country block list. IT Partner also performs verification and issue fixing within the defined engagement plan.

The engagement is considered successful when all scheduled mail protection features are implemented, mail workflow is not broken, and the number of spam and phishing messages has decreased. These criteria align the service with practical protection improvements rather than a claim that every threat will be eliminated.

After implementation, IT Partner verifies the configuration, fixes identified issues, and gathers feedback. Ongoing operations or additional changes beyond the listed deliverables are not specified in the service scope, so any post-engagement support should be confirmed with IT Partner.

The service notes that the plan may vary depending on your needs. Any changes to scope, timing, or configuration approach should be discussed with IT Partner during the kickoff so the engagement remains aligned with the stated deliverables.