E-Mail Protection: File protection MIME-Type Filter not working accordingly

Hello everyone,

I have a strange problem on a customer's XG210 (SFOS 18.0.5 MR-5-Build586). We have been granulating the Filetype-Filter in the E-Mail Protections Mailpolicy. We recently added the MIME-Types for Macro-Enabled officefiles to the Filter

application/vnd.ms-word.document.macroEnabled.12,
application/vnd.ms-word.template.macroEnabled.12,
application/vnd.ms-excel.sheet.macroEnabled.12,
application/vnd.ms-excel.template.macroEnabled.12,
application/vnd.ms-excel.addin.macroEnabled.12,
application/vnd.ms-excel.sheet.binary.macroEnabled.12,
application/vnd.ms-powerpoint.addin.macroEnabled.12,
application/vnd.ms-powerpoint.presentation.macroEnabled.12,
application/vnd.ms-powerpoint.template.macroEnabled.12,
application/vnd.ms-powerpoint.slideshow.macroEnabled.12,
application/vnd.ms-powerpoint.slide.macroEnabled.12

This list here is regarding the MIME-Types for Post Office 2007 Macro-Enabled Filetypes which works accordingly. Now I wanted to Add the Pre-2007 filetypes, which didn't differentiate between Macro-Enabled File and Non-Macro-Enabled filetypes. Since this is an old standard I added the MIME-Types as well to be filtered:

application/vnd.ms-powerpoint,
application/msword,
application/vnd.ms-excel,

But when I do this post Office 2007 Filetypes, that are not macroenabled are beeing filtered too. These Filetypes are pptx, docx and xslx. I tested thoroughly by creating new Testfiles and als checking the MIME-Type manually with Tools.

They were recognized as the following, which are obviously different.

application/vnd.openxmlformats-officedocument.wordprocessingml.document
application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
application/vnd.openxmlformats-officedocument.presentationml.presentation

Is this a known bug? I couldn't find anything regarding this Problem. I already contacted Sophos Support, but it's rather exhausting, since they still don't understand my issue and I don't want to waste anymore time.

Thanks in advance for your help!

Regards,

Oliver



Edited TAGs
[edited by: emmosophos at 10:56 PM (GMT -7) on 10 Aug 2021]