Hello,
we are using Sophos Email Appliance and are faced with the great number of macro viruses that come to our mail system lately. Our first attempt on getting by this situation where the malware changes so quickly that neither the SEA nor our Sophos endpoint detects the malicious files was to drop all word (.doc, .docx) attachments and send the mails to the recipients without the attachments. However, this means that we have to release every single mail from the quarantine that contains "valid" word attachments sent to us by our customers or suppliers.
That's why I propose the following: We would like to see an option to drop the files only when the office file-type attachments contain macros so that all word/excel attachments without macros will arrive at the recipient without further actions required.
Best regards
Christian Hartmann
Scherdel GmbH, Marktredwitz, Germany
This thread was automatically locked due to age.
