Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

Thread Info
  • State Verified Answer
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 6 replies
  • Subscribers 18 subscribers
  • Views 5443 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

S/MIME Encrypted message blocked by Data Control Default policy

Tino Korth | DrehPunkt GmbH

Hello SOPHOS friends,

I'm configuring SOPHOS XMAIL and have the problem that S/MIME encrypted messages are blocked by default Data Control policy.

In the help area of XMAIL are no notices that encrypted mails are blocked:
https://docs.sophos.com/central/Customer/help/de-de/ManageYourProducts/EmailSecurity/DataControlPolicy/SophosDefault/index.html#aufgrund-der-erweiterung-blockiert

Is there a chance to let them pass?

Best regards

Tino



This thread was automatically locked due to age.
Parents
  • 0

    we are evaluating sophos email central at the moment and having the same issue.
    so at the moment you only can disable inbound and outbound data control policy?

    why isnt there an option setting up an exception for special filetypes or headers? you only can make inclusions but no exclusions/exceptions :-(

Reply
  • 0

    we are evaluating sophos email central at the moment and having the same issue.
    so at the moment you only can disable inbound and outbound data control policy?

    why isnt there an option setting up an exception for special filetypes or headers? you only can make inclusions but no exclusions/exceptions :-(

Children
  • +1 in reply to Peter Riederer

    If I'm understanding your question there is a way to accomplish this. You can set header exclusions just set the Message Action to Log and Continue Processing. Actions don't have to be punitive, simply logging is an option.

    In my example I select Attachment File Type, I select Custom List and then select or include in the extensions list, then set the Action to Log. As long as this policy is above the policy that blocks the file it will allow it. Same could be done using headers.

  • 0 in reply to Tom Foucha

    thanks this helps a bit.

    nevertheless i have to unselect the by default enabled extensions first. its a bit annoying i have to jump into each section and unselect every single preselected extension. it would be great, if there would be features like "expand all" "show selected only"  or disable all

Unfiltered HTML