Monthly Email Security Report per Client

​

What you get

• One row per client, for the previous calendar month: spam, phishing and malware totals, each message counted once, by the main threat Microsoft found in it.
• The same detections broken down by delivery action: quarantined, sent to Junk, delivered, blocked or rejected, as far as the client’s licence reports them.
• A filter on the client column, so an account manager can show one client their own numbers.

​

Before you start

• Each client’s tenant is connected to Neo: on the Companies page the company shows access granted (Grant access, or through GDAP). A client Neo cannot reach shows an error on its row; the other clients still load.
• Licensing: every Exchange Online tenant has the spam, phishing and malware counts. Safe Links, Safe Attachments, impersonation protection and zero-hour auto purge numbers need Microsoft Defender for Office 365 Plan 1 or 2 (Microsoft 365 Business Premium includes Plan 1). A tenant without it shows no rows for those, which is not an error.
• Retention: Microsoft keeps these reports for 90 days. The previous month is always there; a month older than 90 days cannot be read, so keep the schedule running to build up history.
• Exchange Online only: a client whose mailboxes are on Exchange Server (on-premises) has no Microsoft email security reports.

​

Set it up

Build a dashboard of last month's email security numbers for every client
whose Microsoft 365 tenant is connected. Per client: spam, phishing and
malware totals from the Mailflow status report, and the same detections
broken down by delivery action (quarantine, junk, delivered, blocked) from
the Threat protection status report. Add a client filter, and refresh it
on the 1st of every month at 07:00.

​

Variations

​

A report your agent sends

​

Other email security reports