Microsoft Defender for Office 365
Email and collaboration

Safe Links About

In brief

The Safe Links documentation now includes Outlook for iOS and Android among the clients where API-based URL checks apply when URL wrapping is disabled.

What Defender admins need to know

Admins should include iOS and Android when reviewing the documented client coverage for this Safe Links setting. No administrator action is stated.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

    - **Wait for URL scanning to complete before delivering the message**:
        - Selected (on): Messages that contain URLs are held until scanning is finished. Messages are delivered only after the URLs are confirmed to be safe. This value is the recommended value.
        - Not selected (off): If URL scanning can't complete, deliver the message anyway.
- **Do not rewrite URLs, do checks via SafeLinks API only**: If this setting is selected (on), no URL wrapping takes place but the URLs are scanned prior to message delivery. In supported versions of Outlook (Windows, Mac, iOS, Android, and Outlook on the web), Safe Links is called via APIs at the time of URL click for an extra scan.

For more information about the recommended values for Standard and Strict policy settings for Safe Links policies, see [Safe Links policy settings](recommended-settings-for-eop-and-office365#safe-links-policy-settings).