This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM - Blocking attached *.EML Files

Hello,

We are having an issue where e-mails attached to e-mails as EML files are getting through to inboxes. This is bypassing block rules for file attachments.

Is there anyway to block e-mails with EML attachments? We attempted to use 'eml' as a blocked file extension, but presumably this will not work as all e-mails are of this extension.

Thanks in advance!

This thread was automatically locked due to age.

0 Vivek Jagad over 1 year ago

Hello SHolyoak ,

Thank you for reaching out to the community, the file extension filter are mostly based on TFT (True File Type) so email can be either of ".eml" or ".msg"
For instance if the attachment is of ".eml" format which is renamed from ".msg" and ".eml" is sent then chances are it may not be blocked as the TFT of that file is ".msg"

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 SHolyoak over 1 year ago in reply to Vivek Jagad

Thank you for replying. The issue that I am having is that even if I specify both EML and MSG, the mail is not being quarantined. I have double checked that the account I am testing with is not on an exception list but it still is not blocking them. See screenshot
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to SHolyoak

Hello SHolyoak , I would request you to raise a support request to check the smtp debug logs while replicating the issue !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel