How to quarantine password protected archives

Question

Hello, 
 
 I'm searching the possibility in Sophos Central Mail to block password protected archives. 
 For UTM this is possible, but I don't find it in central. 
 
 In the DLP policy I only find the category archives, but i.e. also "Office password protected". Nice would be also the option for unscannable files. 
 How can I configure that or are some of those options enabled by default? 
 
 Thanks, 
 Max

j0hnV · Accepted Answer

Hi Max, 
 For incoming mail this is possible, by via Email Gateway, Policies, <open an Email Security policy>, Settings, scroll down to Enhanced Email Malware Scan, switch on "Un-scanned emails if it's off, and select Quarantine. Don't forget to scroll up and click Save. 
 Regards, John

j0hnV · Answer

For outbound mail you can add a rule that blocks the emailing of archives altogether, encrypted or not. Unless archives should be allowed, except encrypted ones. In that case I have to point to https://ideas.sophos.com/forums/428821-sophos-central?category_id=190153.

“First things first, but not necessarily in that order” – Doctor Who

How to quarantine password protected archives

Top Replies