This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Placing blocked files inside zip file

Hi Group,

I noticed when I place a file with a blocked file extension inside a zip file, it seems to circumvent the sophos email filtering.

Is this normal or a bug?

For example, if I try and email someone behind the sophos a file with a .scr suffix, it will get blocked, but if I put that same file into a zip file it goes right through.

This leads me to a follow up quesiton, if the scr file was actually a virus, would it have been caught inside the zip file?

This thread was automatically locked due to age.

Parents

0 BAlfson over 9 years ago

There are several questions here, Tom. If this is not a password-protected zip, then the UTM should look inside the zip. I don't remember if the capability to block zips that contain unwanted file types was added yet, but it definitely does anti-virus.

If you have Endpoint installed on the machine where you open a password-protected zip, it should prevent you from saving the scr file if it's infected.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 9 years ago

There are several questions here, Tom. If this is not a password-protected zip, then the UTM should look inside the zip. I don't remember if the capability to block zips that contain unwanted file types was added yet, but it definitely does anti-virus.

If you have Endpoint installed on the machine where you open a password-protected zip, it should prevent you from saving the scr file if it's infected.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data