Configure and assign solution baselines for Defender for Office 365

Nerdio Manager allows you to configure a solution baseline for Defender for Office 365, which can then be assigned at the account level..

Configure a Defender for Office 365 solution baseline at the MSP level

Nerdio Manager allows you to configure a solution baseline for Defender for Office 365.

To configure a Defender for Office 365 solution baseline at the MSP level

1. At the MSP level, navigate to Solution Baselines.

2. Locate the Defender for Office 365 solution baseline you wish work with.

   

3. From the action menu, select Configure baseline.

4. In the Prerequisites tab, enter the following information: 

   • Optionally, select the pencil icon to edit the solution baseline's name and/or description.

     

5. Once you have entered all the desired information, select Next.

6. In the Threat Rules tab, enter the following information:

   • Tenant Allow/Block Lists:

     • In the Domain & Addresses field, select the domains or emails you want to block from the drop-down list, or enter the details, and then select Enforce, Report-only, or Exclude.

       

     • In the Allow Domain & Addresses, field, select the domains or emails you want to allow from the drop-down list, or enter the details, and then select Enforce, Report-only, or Exclude.

       

     • In the URLs, field, enter the URLs you want to block from the drop-down list, or enter the details, and then select Enforce, Report-only, or Exclude.

       

   • Phishing Simulation:

     • In the Sending IPs and Domains section, enter the following information:

       • Sending IPs: Enter the sending IP from the drop-down list, or enter the details.

       • Sending Domains: Enter the sending domain from the drop-down list, or enter the details

       • Merge Mode: From the drop-down list, select the merge mode. Select from Append or Merge.

       • Select Enforce, Report-only, or Exclude.

         

     • In the Simulation URLs section, enter the sending simulation URLs from the drop-down list, or enter the details, and then select Enforce, Report-only, or Exclude.

       

7. Once you have entered all the desired information, select Next.

8. In the Quarantine Policy tab, enter the following information:

   

9. Once you have entered all the desired information, select Next.

10. In the Threat Policies tab, enter the following information:

    

11. Once you have entered all the desired information, select Next.

12. In the Summary tab, review the changes.

    

13. Set the following options:

    • Process the Solution Baseline for Defender for Office 365 after saving: Select this option to apply the solution baseline to the assigned accounts.

    • Do you want to remove policies that are affected by this change?: If this option is selected, policies from this solution baseline are removed from the tenant if they don't have any other assignments.

14. Once you have reviewed the changes, select Save & close.

Assign a Defender for Office 365 solution baseline at the account level

Nerdio Manager allows you to assign a solution baseline for Defender for Office 365 at the account level.

To assign a Defender for Office 365 solution baseline at the account level

1. at the account level, navigate to Policy Management > Defender O365 Policies.

2. Navigate to the policy you want assign, and from the action menu, select Assign.

3. Enter the following information:

   • Included Users and Groups: Enter the users or groups to be included.

   • Included Domains: Enter the domains to be included.

   • Excluded Users and Groups: Enter the users or groups to be excluded.

   • Excluded Domains: Enter the domains to be excluded.

     

4. Select Confirm.

   Note: Defender for Office 365 policies require assigned users to have a configured mailbox (mail enabled). Attempting to assign a policy to users without a configured mailbox will cause the policy assignment to fail.