Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 18 subscribers
  • Views 4136 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

block an excel file that contains a certain name

MahmoudMohsen

I host my company's mail server via the cloud using Sophos Mail Security


I want to block an excel file containing a certain name from sending via email


How can I do this
I like your suggestion



Added tags
[edited by: Raphael Alganes at 11:00 AM (GMT -7) on 2 Jun 2023]
Parents
  • 0

    As long as the excel file is not encrypted or password protected, Sophos Central Email Gateway should recognize a name as a keyword. You could even use a regular expression, to catch other spellings. Make sure to activate Subject, body, and attachments (content & name) in your outbound DLP rule.

    “First things first, but not necessarily in that order” – Doctor Who

  • 0 in reply to j0hnV

    I can confirm this simply works. Outbound mails that have an excel attachment containing the string MahmoudMohsen are quarantained in my test environment. This would of course happen to all outbound mails containing that name in either subject, body or attachment, if the policy applies. Can also work for inbound mails.

    “First things first, but not necessarily in that order” – Doctor Who

Reply
  • 0 in reply to j0hnV

    I can confirm this simply works. Outbound mails that have an excel attachment containing the string MahmoudMohsen are quarantained in my test environment. This would of course happen to all outbound mails containing that name in either subject, body or attachment, if the policy applies. Can also work for inbound mails.

    “First things first, but not necessarily in that order” – Doctor Who

Children
  • 0 in reply to j0hnV

    If your intention is to just block attachments containing a name instead of all mails, I recommend to take a look at CIXA and its DLP capabilities, which can take care of that.

    “First things first, but not necessarily in that order” – Doctor Who

Unfiltered HTML