We just transitioned from Gmail/Google to Microsoft and I swear it is littered with spam and scam stuff to the absolute gills.

We have barracuda networks protection that has hundreds of emails a week quarantined and there is no shortage of spam. I get legit looking secure file requests from both our corporate side AND spam and they look identical.

It's at a point where I am not sure if any email at all is or is not legit. It's really bad. Why is this? How can MS be so poor at security and why does it feel like it's so terrible?

Check Point Harmony Email & Collaboration

You can set up auto rejection for example for anything coming from outside your company domain or a particular vendors domain if you deal with those for business. MS default server side filtering is absolute ass.

I have come to the conclusion that barracuda networks sends your email address to spammers to make the quarantine seem like it is working. We have internal only emails that are then forwarded to several internal users. They are on domains that are not out in the public with very unique user names. Yes they could be guessed by trial and error by a bot but those emails gets hundreds of caught spam emails a day. I think they push your email addresses out to then catch the spam and penalize you if you ever try to leave.

m-walker said:

---

Check Point Harmony Email & Collaboration

---

This - CheckPoint's Avanan is one of the best email scanning solution out there.

why did you make the move to MS? genuinely curious.

Omperlodge said:

---

I have come to the conclusion that barracuda networks sends your email address to spammers to make the quarantine seem like it is working. We have internal only emails that are then forwarded to several internal users. They are on domains that are not out in the public with very unique user names. Yes they could be guessed by trial and error by a bot but those emails gets hundreds of caught spam emails a day. I think they push your email addresses out to then catch the spam and penalize you if you ever try to leave.

---

Company email addresses are easy to guess. A quick scan of linkedin to find people who work there, try the common variations first.last@example.com, flast@example.com, something is bound to hit and not bounce back.