Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

Smart Banners in signed e-mails (outbound)

Hello everyone,

Is there a way to prevent smart banners from being removed when sending signed mails? 

Our current problem is, that sophos automatically removes smart banners in signed mails, which of course invalidates the signature (the mails are signed on-premise).

Best Regards,

Jonas



Added TAGs
[edited by: Raphael Alganes at 11:20 PM (GMT -7) on 12 Aug 2024]
  • no solution here but I feel you. There should be some SKIP-rules integrated in the Secure Message or Data Control Policy.

    Do not remove banner if mail is signed/encrypted (for those doing SMIME before Central) -> Which I think CAN be dangerous IF 'ALLOW / BLOCK' links are activated in the banners. Recipients can click on those links.

  • Hi  ,

    I understand the risk with activated Allow/Block in banners when replying to mails. As I understand, "only" impersonation protection and anti-spam are bypassed with an User-Allow, so thats not a big concern. But of course the recipient could also click on block, which would unrecoverable delete the incoming mails. So that would be a solution, but definitely not a good one.

    However, I don't understand the point of Sophos doing the SMIME stuff on there side either, as I can't guarantee the integrity of the mails on their way to Sophos Central.