Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

E-Mail Protection: File protection MIME-Type Filter not working accordingly

Hello everyone,

I have a strange problem on a customer's XG210 (SFOS 18.0.5 MR-5-Build586). We have been granulating the Filetype-Filter in the E-Mail Protections Mailpolicy. We recently added the MIME-Types for Macro-Enabled officefiles to the Filter

application/vnd.ms-word.document.macroEnabled.12,
application/vnd.ms-word.template.macroEnabled.12,
application/vnd.ms-excel.sheet.macroEnabled.12,
application/vnd.ms-excel.template.macroEnabled.12,
application/vnd.ms-excel.addin.macroEnabled.12,
application/vnd.ms-excel.sheet.binary.macroEnabled.12,
application/vnd.ms-powerpoint.addin.macroEnabled.12,
application/vnd.ms-powerpoint.presentation.macroEnabled.12,
application/vnd.ms-powerpoint.template.macroEnabled.12,
application/vnd.ms-powerpoint.slideshow.macroEnabled.12,
application/vnd.ms-powerpoint.slide.macroEnabled.12

This list here is regarding the MIME-Types for Post Office 2007 Macro-Enabled Filetypes which works accordingly. Now I wanted to Add the Pre-2007 filetypes, which didn't differentiate between Macro-Enabled File and Non-Macro-Enabled filetypes. Since this is an old standard I added the MIME-Types as well to be filtered:

application/vnd.ms-powerpoint,
application/msword,
application/vnd.ms-excel,

But when I do this post Office 2007 Filetypes, that are not macroenabled are beeing filtered too. These Filetypes are pptx, docx and xslx. I tested thoroughly by creating new Testfiles and als checking the MIME-Type manually with Tools.

They were recognized as the following, which are obviously different.

application/vnd.openxmlformats-officedocument.wordprocessingml.document
application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
application/vnd.openxmlformats-officedocument.presentationml.presentation

Is this a known bug? I couldn't find anything regarding this Problem. I already contacted Sophos Support, but it's rather exhausting, since they still don't understand my issue and I don't want to waste anymore time.

Thanks in advance for your help!

Regards,

Oliver



This thread was automatically locked due to age.
Parents Reply
  • HiHi,

    sorry for the late reply. I was in contact with Sophos Support now and i think we have managed to clear up any misunderstandings. The CaseID: 04259550

    I provided Sophos Support access to the Appliance. Currently I am waiting for a reply.

    Kind Regards,

    Oliver

Children