# Advanced Spam filter options are turned off

Enabling one or more of the ASF settings is an aggressive approach to spam filtering that can often cause false positives.

Source: https://maester.dev/docs/tests/ORCA.102

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/soulemike" title="Michael Soule · Original author"><img src="https://github.com/soulemike.png" alt="Michael Soule" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/soulemike">Michael Soule</a></span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/orca">ORCA</a> · Defender · Anti-spam · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId ORCA.102
```

## Overview

Enabling one or more of the ASF settings is an aggressive approach to spam filtering that can often cause false positives. The effectiveness of these settings in reducing spam has severely declined over the years. Use them with caution.

#### Remediation action

Turn off Advanced Spam filter (ASF) options in Anti-Spam filter policies.

#### Related Links

* [Microsoft 365 Defender Portal - Anti-spam settings](https://security.microsoft.com/antispam)
* [Recommended settings for EOP and Microsoft Defender for Office 365 security](https://aka.ms/orca-atpp-docs-6)

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | ORCA.102 |
| Severity | Low |
| Suite | ORCA |
| Product | Defender |
| Related products | Exchange Online |
| Feature | Anti-spam |
| Area | Email and collaboration protection |
| Resource type | Policy |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| Supports controls | nist-800-53-r5:SI-8 |
| PowerShell test | [Test-ORCA102](https://github.com/maester365/maester/blob/main/tests/orca/Test.ORCA.102.ps1) |
| Services | ExchangeOnline |

</details>

## Source

- Test: [`tests/orca/Test.ORCA.102.ps1`](https://github.com/maester365/maester/blob/main/tests/orca/Test.ORCA.102.ps1)
- Documentation: [`tests/orca/Test.ORCA.102.md`](https://github.com/maester365/maester/blob/main/tests/orca/Test.ORCA.102.md)