POP3: Disabled (for Default Group)

Roll-Out

Some steps to consider:

Consult with the client on the security risks and need for POP3 and your intention to turn it off (see communication below)
Create groups on each tenant to manage the override for users who absolutely require POP3, while ensuring they understand the security risks involved.
Instruct the client to place specific users or groups into the POP3 override group and ensure that only those who need it are granted access.
Use the Account Management section of the dashboard to allocate users into groups based on security needs and monitor their usage of POP3 versus more secure protocols.
Implement robust authentication methods like multi-factor authentication (MFA) to mitigate risks.
Train Level 1 MSP support teams on the security risks of POP3. Note that the result may be clients with very old applications may lose connectivity

Client Communication

The following communication could be sent to the client to inform them of the baseline roll-out and likely repercussions if any

Hi

We will soon be rolling out essential security protection for your Microsoft 365 tenant to protect your business. This will include the following security configurations:

POP3 Protocol: Disabled

POP3 (Post Office Protocol version 3) is an older email protocol used to retrieve emails from mail servers. POP3 does not support encryption by default, making it more vulnerable to attacks such as eavesdropping, unauthorized access, and data interception.

Many legacy email clients and services, including older versions of Outlook, Thunderbird, or certain mobile email apps, may still use POP3. However, if your business consists of devices purchased from 2007 onwards, it is very unlikely that POP3 is in use.

We recommend identifying any such services within your organization and consider switching to more secure alternatives for better security, encryption, and centralized email management. If a device must use POP3 please let us know well in advance of the roll-out date.

The deployment will occur on <INSERT DATE>. Please contact <SUPPORT> for any queries.

Best

POP3 - Post Office Protocol v3

POP3