The SecurityGateway Add-in for Microsoft 365 brings SecurityGateway's spam training directly into Outlook and Outlook on the web, so users can mark messages as junk or not junk without leaving their inbox. When a user clicks one of the add-in's buttons, the message's classification is reported to SecurityGateway to train its Bayesian spam filter, and the message is moved to the appropriate folder automatically. The add-in is available for Outlook on the web, Outlook for Windows (2016 and later), Outlook for Mac, and the Outlook mobile apps for iOS and Android. Note: The add-in only transmits a message's spam/not-spam classification to SecurityGateway; it does not send message content to any external service, and sign-in is handled entirely by Microsoft's own identity platform.
Features
The add-in's buttons appear in the message ribbon on desktop and web, and in the overflow menu on mobile.
Mark As Junk
Reports the message to SecurityGateway as spam, trains the Bayesian filter to recognize similar messages going forward, and moves the message to the Junk Email folder.
Mark As Not Junk
Reports the message to SecurityGateway as legitimate mail, trains the Bayesian filter to recognize similar messages as legitimate, and moves the message back to the Inbox.
Using the Add-in
Authentication
The first time a user clicks Mark As Junk or Mark As Not Junk, Outlook will prompt for Microsoft 365 sign-in and ask the user to grant the add-in permission to read and move messages. Once granted, the add-in caches that authorization so the user isn't prompted again on subsequent use.
Marking Messages
To train the filter on a message, open or select it, locate the SecurityGateway group in the Outlook ribbon, and click Mark As Junk for spam or Mark As Not Junk for legitimate mail that was incorrectly flagged. A confirmation appears, and the message moves to the appropriate folder automatically. The add-in only works with a message open or selected in read mode — it isn't available while composing a message.
Requirements
To use the add-in, a user needs a Microsoft 365 mailbox that receives mail processed through SecurityGateway, and the "Allow Microsoft 365 add-in to submit spam and non-spam messages for learning" option must be enabled on the SGSpamD Configuration page. That option inserts the SecurityGateway spam-training header (X-SGBayesSubmit) into messages so that only messages that passed through SecurityGateway will appear as usable to the add-in. If you wish to deploy the add-in, then an administrator needs Microsoft 365 admin access.
Installing the Add-in
There are three ways to install the add-in, depending on whether you want individual users to install it themselves or want to deploy it organization-wide.
Individual Installation
Users can install the add-in themselves from within Outlook.
Outlook on the Web
1.Open Outlook on the Web (https://outlook.office.com )
2.Click the Settings gear icon
3.Select View all Outlook settings
4.Go to Mail > Customize actions > Get add-ins
5.In the add-ins dialog, select My add-ins
6.Under Custom add-ins, click Add a custom add-in > Add from URL
7.Enter the manifest URL: https://files.mdaemon.com/securitygateway/O365/Functions/SecurityGatewayOptions-AddIn.xml
8.Click Install
Outlook Desktop (Windows/Mac)
1.Open Outlook
2.Go to Home tab > Get Add-ins (or Store in older versions)
3.In the add-ins dialog, select My add-ins
4.Click Add a custom add-in > Add from URL
5.Enter the manifest URL: https://files.mdaemon.com/securitygateway/O365/Functions/SecurityGatewayOptions-AddIn.xml
6.Click Install
Centralized Deployment (Recommended for Organizations)
Administrators can deploy the add-in to all users through the Microsoft 365 admin center:
1.Sign in to the Microsoft 365 admin center (https://admin.microsoft.com )
2.Go to Settings > Integrated apps
3.Click Upload custom apps
4.Select Office Add-in as the app type
5.Choose Provide link to manifest file
6.Enter: https://files.mdaemon.com/securitygateway/O365/Functions/SecurityGatewayOptions-AddIn.xml
7.Click Validate to verify the manifest
8.Click Next
9.Choose deployment options:
10.Entire organization: Deploy to all users
11.Specific users/groups: Select specific users or groups
12.Review the app permissions (requires Mail.ReadWrite)
13.Click Next, then Finish deployment
Note: Centralized deployment can take up to 24 hours to propagate to all users.
PowerShell Deployment
For automated or scripted deployments:
For scripted or automated deployment, connect to Exchange Online with PowerShell and use the New-App cmdlet with the add-in's manifest URL, for example:
# Connect to Exchange Online Connect-ExchangeOnline
# Deploy to all users New-App -OrganizationApp -Url "https://files.mdaemon.com/securitygateway/O365/Functions/SecurityGatewayOptions-AddIn.xml" -DefaultStateForUser Enabled
# Deploy to specific users New-App -OrganizationApp -Url "https://files.mdaemon.com/securitygateway/O365/Functions/SecurityGatewayOptions-AddIn.xml" -ProvidedTo SpecificUsers -UserList user1@domain.com,user2@domain.com
# Disconnect Disconnect-ExchangeOnline |
Support
For support on the SecurityGateway Add-in for Microsoft 365:
•Visit: https://www.mdaemon.com/support/
•See: Heuristics and Baysian and SGSpamD Configuration for more information on Bayesian filter configuration