Enabling real-time scan for MS365 and real time scanning Policy

[amr_ali1]

Dears,

We have configured a real-time scanning policy on our FortiMail system to scan emails delivered to user mailboxes.

My question is: What are the recommended or best practice profile settings for this policy to effectively scan and protect the contents of the mailboxes?

[Jiveshs]

DLP: Enable if sensitive data (credit cards, PII) is a concern

File Filtering: Block high-risk file types (e.g., .exe, .js, .scr, etc.)

FortiGuard AntiSpam DB: ENABLED