#32106 Operational | P3 | Microsoft 365: Tenant Allow/Block List Entry is About to Expire @ Bank of Montana

Created from Lead: https://artichoke.shield.syncromsp.com/leads/30183911/convert

[embedded image](https://www.blumira.com/)

Operational | P3 | Microsoft 365: Tenant Allow/Block List Entry is About to Expire @ Bank of Montana

Blumira has detected Microsoft 365: Tenant Allow/Block List Entry is About to Expire for Bank of Montana on 2025-01-29 04:42AM MST and triggered action Create Informational Finding for Responders.

Analysis:

A Tenant Allow/Block List entry will be removed due to expiration. -V1.0.0.0
The Tenant Allow/Block List in the Microsoft 365 Defender portal gives you a way to manually override the Microsoft 365 filtering verdicts. The Tenant Allow/Block List is used during mail flow for incoming messages (does not apply to intra-org messages) and at the time of user clicks.
To go directly to the Microsoft 365 Allow/Block Lists page, use https://security.microsoft.com/tenantAllowBlockList
In these specific logs, Microsoft will pass through the tenant ID. If you have multiple tenants you can view the saved global report titled "Microsoft 365 - Domain and Tenant Match" to help find the correct list entry.

Finding ID: F-25-04-B6BC

Finding Data Source: Microsoft365 Compliance
Replying to this email does not open a ticket or notify the support team. Please email [email protected] or comment within the Finding.

[Learn More](https://app.blumira.com/35f9513a-d9d8-4db6-be0b-36df543b1591/query/findings/b6bcc65d-84d7-4ddd-bfc7-0ffadaeb50f8)

[embedded image]

[email protected]
[206 E. Huron Street, Suite 106, Ann Arbor, MI 48104](#)

9976c78e-5b97-4302-a214-4de844470519

[embedded image]

Automation Blumira ran on this ticket. Actions: Change Status to New-Blumira