advanced threat protection

How Advanced Threat Protection Works

Reading Time: 4 minutes

Our inboxes are often the battleground for the war cybercrime is waging against businesses. We are plagued with phishing emails masking malicious links and attempts to gain sensitive information or money.

We need to constantly be thinking about the emails that we receive and the attachments and links that we open. Sometimes, no matter the amount of training that we have received, it can become difficult to always remember to be looking for danger in our emails. It’s very easy to be up against a deadline, rushed off our feet or just stressed out and then click on something that we weren’t supposed to.

Any tool that can help remove the risks that are posed to our staff and our businesses by email should be looked at with interest. Things like Anti-Spam, which is part of our 7 Steps to Cyber Security, have been around for awhile. Anti-Spam will filter out unsolicited email the best that it can yet there’s always going to be things that slip through the net.

It’s also important to think about the fact that sometimes emails are not intended to be malicious at all. A colleague or contact might send us an email with an attachment and not realise that it contains a virus.

Advanced Threat Protection is a new tool that has been made available to add-on to your Office 365 package. It scans the links and attachments that arrive in our inboxes to ensure that they are not malicious. In this blog we are going to look at how Advanced Threat Protection works and how it can benefit your business.

advanced threat protection

What is Advanced Threat Protection?

Advanced Threat Protection is one of the latest security tools that Microsoft has made available to add-on to Office 365. The concept of the tool is that it provides an added layer of security to your inbox to mitigate against the accidental clicks that can sometimes occur.

New security risks are appearing every single day and Advanced Threat Protection scans the emails you receive in real-time to ensure that you are not making yourself open to them.

One part of the tool is called Safe Attachments and this is focused on ensuring the attachments that you receive do not contain malware or other risks. All suspicious content is scanned using malware behavioural analysis technology (it scans it to see if it appears malicious) to identify if there is any suspicious activity. Any attachments that are deemed unsafe are sandboxed (isolated from the environment). The recipient will then not be able to open the attachment.

The other part of the tool is called Safe Links. Safe Links protects your environment if you click on a malicious link. As content is scanned, the URLs of links are rewritten so that they go through Office 365. The URLs are checked in real-time as the user clicks on them, if the link is malicious then the site will be blocked and the user will not be able to access it.

Another handy aspect of Advanced Threat Protection is the reporting that is on offer. You are able to see who in your organisation is being targeted with cyber-attacks and the scale of the attacks that you are facing.

How Advanced Threat Protection Works

We’ve explained what goes on in the background with Advanced Threat Protection. What the user or recipient of the email actually sees is not particularly intrusive unless there’s a problem.

When you receive an email with a link or attachment, you have to a wait a couple of seconds for the contents to be scanned. It’s only a few seconds, which can be frustrating if you want to open something straight away. Most people expect everything instantly these days. The way you have to see it is those handful of seconds could be the difference between a day of downtime and you getting everything done today.

advanced threat protection scan

If there is nothing wrong with the link or attachment, then the user is able to carry on and open what they need to without any further interruption.

If there is something wrong to be found with the contents of the email then the user is stopped from opening any links or attachments.

If the user clicks on a link that is malicious then the browser will be opened and they will be faced with a red screen informing them that there is an issue with the link and that it is highly recommended that they do not proceed in going any further.

advanced threat protection

On the other hand, if the user tries to open an attachment that is viewed as malicious by Advanced Threat Protection then they are not able to open the document.

Benefits of Advanced Threat Protection

Advanced Threat Protection is an essential tool for businesses using Office 365 as it is an addition that brings little cost and a lot of benefit. The tool removes the risk of human error when it comes to cyber security and makes inboxes a much safer place, especially for those that are not overly IT literate.

Advanced Threat Protection can in most cases be added on to your Office 365 subscription for as little as £1.50 per user per month, making it a low-cost tool to mitigate high risks.

One of our essential steps to cyber security is end user education. We always recommend that you make sure that your staff are trained to recognise security threats. We also recognise that no matter what training we are given we can all still make mistakes. Advanced Threat Protection is a brilliant tool to mitigate against those mistakes.

If you are interested in adding the tool on to your Office 365 subscription then please give ACUTEC a call on 01675 469020 or email us at