Enabling real-time scan for MS365 and real time scanning Policy

Dears,

We have configured a real-time scanning policy on our FortiMail system to scan emails delivered to user mailboxes.

My question is: What are the recommended or best practice profile settings for this policy to effectively scan and protect the contents of the mailboxes?