block an excel file that contains a certain name

MahmoudMohsen Thank you for posting here. 

Preventing using keyword or file type is usually done via the Data Leakage Prevention (or Data Control) policy. However what you are after, I don't think this is possible yet.

This is because currently there are no rules that can trigger which takes both file type AND keyword type into account at the same time. Its going to be one or the other.. Either keyword type or file type rule. 

This would have to be a feature request. 

I would recommend contacting your Sophos Sales representative for lodging this. The link below explains how:

https://community.sophos.com/b/community-blog/posts/sophos-ideas-portal-retirement

Kindly give us a context for this request. I feel that some information is missing. The reason being is that the person might send the same information in a different file type anyway... So even if the feature you are after is present, it would not detect anyway if sent in another file type  - judging from the information that is currently known to us. 

As long as the excel file is not encrypted or password protected, Sophos Central Email Gateway should recognize a name as a keyword. You could even use a regular expression, to catch other spellings. Make sure to activate Subject, body, and attachments (content & name) in your outbound DLP rule.

I can confirm this simply works. Outbound mails that have an excel attachment containing the string MahmoudMohsen are quarantained in my test environment. This would of course happen to all outbound mails containing that name in either subject, body or attachment, if the policy applies. Can also work for inbound mails.

If your intention is to just block attachments containing a name instead of all mails, I recommend to take a look at CIXA and its DLP capabilities, which can take care of that.