This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Digest email and restricted attachments - Whitelist senders/domains to allow restricted attachments

Two issues that arise from Puremessages ineffective spam filtering as per the below discussion:

https://community.sophos.com/products/puremessage/f/11/p/5726/286112#286112

I can reduce the level of obvious SPAM allowed into Exchange by adding Office documents as restricted file types. However, this as a workable solution fails for the following two reasons when genuine emails are sent which include a restricted Office attachment. I want a resolution for both!

1. You can add senders to the allowed sender list to skip spam filtering, however this doesn't skip restricted attachment checks which mean the genuine email can only be released by me as admin by logging directly into Puremessage and releasing the quarantined item. Not a workable long term solution.

2. The Puremessage SPAM digest email that is sent to users does not show the emails that have been quarantined due to the restricted file type, although it is shown in the Puremessage admin console.. So if Puremessage is not going to block obvious spam, I need to restrict the obvious SPAM which all seem to contain Office Documents via adding them to the restricted attachments. However users need to be able to allow delivery of the genuine emails with these attachments via the digest link and are unable to do so as they do not appear. This needs to be fixed immediately as PureMessage is unusable in its current state.

The alternative is unmanageable, which is to notify the entire world to convert all documents to PDF before sending them to our organisation. This is not possible. One of our regular senders is the Police force and I doubt I will convince the police force to change their procedures. We need to be able to receive genuine emails with Office attachments as well as not be bombarded with SPAM.



This thread was automatically locked due to age.
Parents
  • The response from Sophos is:
    By design, the following items will not show in the Digest Website:
    • Content Violations
    • Offensive Language
    • Suspicious Attachment
    • Restricted Attachment
    • Infected Attachment
    • Encrypted Attachment
    • Encrypted Message
    So this is the main reason why you are seeing an incomplete list in the end user's digest / portal.

    So therefore, because PureMessage allows alot of obvious spam through which generally always contain a Word document, adding word documents to the restricted attachments list is not a viable option as a user cannot then release the valid email out of quarantine. I therefore have to come to the conclusion that Puremessage is ineffective and unworkable.
Reply
  • The response from Sophos is:
    By design, the following items will not show in the Digest Website:
    • Content Violations
    • Offensive Language
    • Suspicious Attachment
    • Restricted Attachment
    • Infected Attachment
    • Encrypted Attachment
    • Encrypted Message
    So this is the main reason why you are seeing an incomplete list in the end user's digest / portal.

    So therefore, because PureMessage allows alot of obvious spam through which generally always contain a Word document, adding word documents to the restricted attachments list is not a viable option as a user cannot then release the valid email out of quarantine. I therefore have to come to the conclusion that Puremessage is ineffective and unworkable.
Children
No Data