1. No we have not been upgraded.
2. Yes we use a Hybrid deployment.
3. I believe it does mean FOPE, whatever the official term is for the ForeFront included with our Office365 subscription.
Thank you for the clarification on FOPE. Concerning NDR's to Office365 users, I am used to using Message Tracking Log Explorer and a Quarantine mailbox to troubleshoot spam issues. Do we have anything similar as Office 365 admins or should we just open support request for these types of issues? Do we have any control over ip whitelisting or exceptions for Content Filtering?