# Outlook is configured to display external tags for external emails

External tags show users email that is coming from external. EOP & MDO works with native client side integration to clearly highlight external emails.

Source: https://maester.dev/docs/tests/ORCA.240

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/soulemike" title="Michael Soule · Original author"><img src="https://github.com/soulemike.png" alt="Michael Soule" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/soulemike">Michael Soule</a></span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/orca">ORCA</a> · Defender · Tenant settings · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId ORCA.240
```

## Overview

External tags show users email that is coming from external. EOP & MDO works with native client side integration to clearly highlight external emails. This allows you to train users to identify these emails so that they can be more suspicious about the email contents.

#### Remediation action

Configure external tags to highlight emails which are sent from external.

#### Related Links

* [Native external in Outlook](https://techcommunity.microsoft.com/t5/exchange-team-blog/native-external-sender-callouts-on-email-in-outlook/ba-p/2250098)
* [Set External in Outlook (Set-ExternalInOutlook)](https://learn.microsoft.com/powershell/module/exchange/set-externalinoutlook?view=exchange-ps)

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | ORCA.240 |
| Severity | Medium |
| Suite | ORCA |
| Product | Defender |
| Related products | Exchange Online |
| Feature | Tenant settings |
| Area | Email and collaboration protection |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | T1566 Phishing |
| Supports controls | nist-800-53-r5:SI-8 |
| PowerShell test | [Test-ORCA240](https://github.com/maester365/maester/blob/main/tests/orca/Test.ORCA.240.ps1) |
| Services | ExchangeOnline |

</details>

## Source

- Test: [`tests/orca/Test.ORCA.240.ps1`](https://github.com/maester365/maester/blob/main/tests/orca/Test.ORCA.240.ps1)
- Documentation: [`tests/orca/Test.ORCA.240.md`](https://github.com/maester365/maester/blob/main/tests/orca/Test.ORCA.240.md)