Microsoft 365 Enterprise - Intranet

Microsoft 365 EnterpriseNate Stewart – Microsoft Account ExecutiveChristian Williams – Senior Microsoft Solutions SpecialistWes Barnes- Solution Specialist

EMS E5EMS E3Enterprise Mobility & Security capabilitiesIdentity and access managementIdentity Driven SecurityManaged Mobile ProductivityInformation ProtectionAzure Active DirectoryPremium P1Microsoft Advanced ThreatAnalyticsMicrosoftIntuneAzure InformationProtection Premium P1Single sign-on to cloud and onpremises applications. Basicconditional access securityIdentify suspicious activities &advanced attacks on premises.Mobile device and appmanagement to protect corporateapps and data on any device.Encryption for all files and storagelocations. Cloud based filetrackingExisting Azure RMS capabilitiesAzure Active DirectoryPremium P2Advanced risk based identityprotection with alerts, analysis, &remediation.MicrosoftCloud App SecurityBring enterprise-grade visibility,control, and protection to yourcloud applications.Azure InformationProtection Premium P2Intelligent classification, &encryption for files shared inside &outside your organizationSecure Islands acquisition2

CLOUD-POWERED PROTECTIONA standalone Azure identity and accessmanagement service, also included inAzure Active Directory PremiumPrevents unauthorized access to bothon-premises and cloud applications byproviding an additional level ofauthenticationTrusted by thousands of enterprisesto authenticate employee, customer,and partner access

Provides the critical second layer of security to user sign-ins and transactionsMobileappsPhonecallsTextmessages

MONITORANDUserssignPROTECTin from any device usingtheir existing username/password.User12Users must also authenticateusing their phone or mobiledevice before access isgrantedOn-premises serverWindows ServerActive Directory or other LDAPCloud appsMicrosoft AzureActive DirectoryMulti-factorauthenticationserver

Read More Azure Multi-Factor Authentication - Microsoft Azure Review TechNet Azure Multi-Factor Authentication Watch Channel 9 Azure MFA Videos/ Demos

Azur e MFA Demo

Mobile devicemanagementMobile applicationmanagementPC managementUserITMicrosoft IntuneIntune helps organizations provide their employees with access to corporateapplications, data, and resources from virtually anywhere on almost anydevice, while helping to keep corporate information secure.

Managed appsUserPersonal appsMaximize productivity while preventing leakage of companydata by restricting actions such as copy, cut, paste, and saveas between Intune-managed apps and unmanaged apps

15Advanced Threat Protection Help protect against unknown malware and viruses Provide real-time, time-of-click protection against malicious URLs Deliver rich reporting and URL trace capabilities with Click TracingAdvanced Threat ProtectionAdvanced Security Management Identify high-risk and abnormal usage, security incidents, and threats Gain enhanced visibility and context into Office 365 usage and shadow IT Reduce the possibility of attacks with granular controls that monitor accessAdvanced Security ManagementThreat Intelligence Actionable insights to global attack threatsThreat IntelligenceAdvanced Compliance Focus on what is unique and relevant by training the system to identify emails anddocuments through predictive coding Reduce document volume with Near Duplicates and Email Threading Includes Customer Lockbox and new feature Advanced Data GovernanceAdvanced Compliance

Advanced Threat ProtectionAdvanced Threat Protection (ATP) is an email filtering service thathelps protect against unsafe links and attachments while providingrobust tracing and reporting.ATP builds on Exchange Online Protection (EOP)using advanced machine learning techniquesand an isolated detonation chamber to catchthe latest pieces of malware.“Safe Attachments in Exchange Online AdvancedThreat Protection is going to reduce zero-day threatsfrom malware and viruses. This will help preventmalicious attachments from impacting ourenvironment.”— Brian Ivie, Chief Security O NEEDSSafeguard your business better againstpreferred attack methods like zero dayUse robust tracing and reporting tofind patterns to malicious content andadjust policies for greater protectionCustomize the policies for SafeAttachments and Safe Links to meetyour specific business needs

Anti-spam ProtectionEOP performs anti-spam checks at two points in the filtering process via:Connection Filtering: EOP checks the recipient and connection to verify the message does notoriginate from a known spammer. Messages are then scanned by policy-based filters and anti-malwareengines.Content Filters: Messages are scanned for spam again by content filters, which examine each part ofthe message, including the header and body, against terms and phrases commonly found in spam andassign the message a spam confidence level. Spam messages are given one of two different spamratings: spam and high confidence spam.Spam ManagementIn EOP, administrators have the flexibility to configure different actions on different types of messages.For example, the admin can send spam messages to a user’s Junk Email folder or to quarantine andimmediately delete high confidence spam.Anti-malware ProtectionEOP scans messages with multiple antivirus engines to provide maximum protection against malware.These antivirus engines include powerful heuristic detection to provide protection even during theearly stages of a virus outbreak. EOP checks for updated virus signatures every 15 minutes.Additionally, EOP’s anti-malware team provides real-time threat responses during zero hour attacks bycreating rules to block messages that contain known malware, even before the virus definition hasbeen released.Policy RulesIn EOP, customers can configure policy-based filtering using Transport Rules in the ExchangeAdministration Console. Administrators can create transport rules with multiple predicates so thatmessages must match multiple conditions before the action is triggered. Additionally, Transport Rulessupport exceptions, auditing, and additional actions to help control mail flow at a more granular level.Transport rules support .NET Regular Expressions.AdministrationEOP is part of the Office 365 admin centre, providing a centralised management console for allMicrosoft cloud services.EOP will prevent any high risk email coming through to the user’s inbox, and allow any high confidencemail, that is deemed safe to come through to the junk mail folder. This allows the end user to havegreater control and administrative discretion over what is classified as spam or junk mail throughapplying their own policy rules to particular domains within Exchange, without having to log in to anexternal management console.Reporting and LoggingIn EOP, users can view detailed reports in the Reports tab of the Exchange Administration Center. TheProtection section offers several different views of a customer’s filtered inbound and outbound mailand the spam and malware caught by the service. Additionally, administrators can download mailprotection reports, which provide a detailed view into the email protection reports available in theReporting dashboard.Service Level Agreement (SLA) and supportMicrosoft provides EOP users with five financially backed SLAs, which attest to a high quality of service.In addition to 99.999% uptime, EOP also provides protection for: 100% known virus detection 99% spam detection rate False positive ratio of less than 1:250,000 messages Average email delivery time of less than 1 minute

THANK YOU

Enterprise Mobility & Security capabilities Microsoft Intune Mobile device and app management to protect corporate apps and data on any device. Managed Mobile Productivity Microsoft Advanced Threat Analytics Identify suspicious activities & advanced attacks on premises. Microsoft Cloud App Security Bring enterprise-grade visibility,