Identifies good and bad email source servers early in the inbound email connection via the IP Allow List, IP Block List, and the safe list (a dynamic but non-editable list of trusted senders). You configure these settings in the connection filter policy.
Spam filtering (content filtering):
EOP uses the spam filtering verdicts Spam, High confidence spam, Bulk email, Phishing email and High confidence phishing email to classify messages. You can configure the actions to take based on these verdicts, and you can configure the end-user notification options for messages that were quarantined instead of delivered.
Outbound spam filtering:
EOP also checks to make sure that your users don’t send spam, either in outbound message content or by exceeding outbound message limits.