Skip to main content

Skyhigh Security is launching standalone documentation portals to support Japanese, German, and French languages. We are not supporting auto-translation. Stay tuned for further updates. Thanks for your support.

Skyhigh Security

Create an On-Demand Scan for Microsoft Exchange Online

NOTE: On-Demand Scans are only available with API-based deployments. Proxy-based deployments are not compatible with On-Demand Scans.

Create an On-Demand DLP Scan to scan your Microsoft Exchange Online resources. 

For Malware and S3 Bucket scans, see:

To configure an On-Demand Scan:

  1. Choose Policy > On-Demand Scan.
  2. Click Actions > Create a Scan.
  3. The Scan Creation Wizard is displayed. On the General Info page enter the following:
    • Scan Type. Select DLP & Malware.
    • Name. Enter a unique identifier so that you can rerun the scan later.
    • Description. Enter an optional description for the scan. 
    • Service Instance. Select the cloud service instance you want to scan.
      About DLP and Malware Scans.png
  4. Click Next
    clipboard_e801769123abe71460ae6dfdcd6b34b7c.png
  5. On the Select Policies page, select the available policies to use for your scan type. 
  6. Click Next
    clipboard_ef36b813146c3770ba0bc0ad3cf124709.png
  7. On the Configure Scan page, configure the scope and users for your scan. 
    • Data Scope. 
      • Full. Scans all content every time the scan is run. The first time you run a scan, you must use Full mode. 
      • Incremental. Scan only content that has changed since the last successful scan. For details about Incremental mode, see About On-Demand Scans
      • Scan Dates. Select All, to scan all data. Or select Last X Days to limit the scan to the specified time period. 
      • Email Folders. Select the required folders to scan for violating content in the email.
    • Users. 
      • All Users. Scan all users. 
      • Include Specific Users. To include only specific users, select User Groups, a Predefined Dictionary, or enter users manually in a comma-separated list. 
      • Exclude Specific Users. To exclude only specific users, select User Groups, a Predefined Dictionary, or enter users manually in a comma-separated list. 
  8. Click Next
    ods_wizard4_3.9.png
  9. On the Schedule Scan page, select the schedule for your scan to run:
    • None (On-Demand Only). Run the scan once now.
    • Daily. Run the scan once a day. Configure the time and time zone. 
    • Weekly. Run the scan once a week. Configure the day, time, and time zone. 
  10. Click Next
    clipboard_e4ba01f179a56b807f4632f99bf1cc5ce.png
  11. On the Review & Activate page, review your settings for the On-Demand Scan, and click Save.  Or click Back to make changes. 

Once a scan is completed, you can view the results, or rerun the scan again anytime on the Policy > On-Demand Scan page. 

View policy incident violations on the Policy Incidents page. 

Limitation

When you run On-Demand Scan on disabled mailbox accounts, we can't fetch details from mailboxes that are disabled. So we do not support ODS for disabled mailbox accounts in Exchange Online.

  • Was this article helpful?