Description: This check verifies that the native Exchange External Message setting is enabled in Exchange by ensuring that 'Set-ExternalInOutlook - Enabled' is true.

Why: This allows users to easily differentiate phishing messages originating from an external source. If your organization already uses mail flow rules (also known as transport rules) to add text to the subject line of messages from external senders, you should disable those rules before you enable this feature to avoid duplication.

Security Awareness: The tag alerts users that an email originated from an external sender (someone outside the organization). It encourages caution and prompts recipients to double-check the email’s legitimacy. Even with robust spam filters, user awareness remains essential in preventing spyware and malicious links.
Phishing Prevention: Despite measures like SPF, DKIM, and DMARC, some phishing and spam emails can still slip through. The external tag helps users identify potentially harmful messages and avoid clicking on suspicious links or attachments.
Visual Cue: When an email bears the “External” tag, it stands out visually. Users can quickly recognize that the sender is not part of their organization, prompting them to exercise caution.
Admin Tracking: For administrators, external tags assist in tracking and monitoring potentially risky emails. It helps identify patterns and assess security threats.

Cofiguration Settings

Configured: Exchange External Sender Tag is enabled.
Not Configured: Exchange External Sender Tag is disabled.

Microsoft Licensing: Works with Basic licensing

Secure Score Impact: No

Getting Started