Thread Info
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to quarantine password protected archives

MLJK

Hello,

I'm searching the possibility in Sophos Central Mail to block password protected archives.

For UTM this is possible, but I don't find it in central.

In the DLP policy I only find the category archives, but i.e. also "Office password protected". Nice would be also the option for unscannable files.

How can I configure that or are some of those options enabled by default?

Thanks,

Max



Added tags
[edited by: Raphael Alganes at 3:56 AM (GMT -7) on 7 Jun 2023]
  • +1

    Hi Max,

    For incoming mail this is possible, by via Email Gateway, Policies, <open an Email Security policy>, Settings, scroll down to Enhanced Email Malware Scan, switch on "Un-scanned emails if it's off, and select Quarantine. Don't forget to scroll up and click Save.

    Regards,
      John

    “First things first, but not necessarily in that order” – Doctor Who

    • 0

      For outbound mail you can add a rule that blocks the emailing of archives altogether, encrypted or not. Unless archives should be allowed, except encrypted ones. In that case I have to point to https://ideas.sophos.com/forums/428821-sophos-central?category_id=190153.

      “First things first, but not necessarily in that order” – Doctor Who