Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 10 replies
  • Subscribers 0 subscribers
  • Views 24030 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Attachment Filter

Azwan

Hi all,

I receive product feature or setting inquiring regarding sophos email appliance.

customer inquiring if sophos email appliance have setting or features like MIME Sweeper Attachment Filtering.

Whereby every email from outbound with attachment will be quarantine and email will be deliver to enduser with banner to contact IT for attachment release.

I have check email appliance setting and the setting can be configured except email that deliver to end user contain only banner and header, Can someone help me or have any information reagrding this setting?. Thanks

:18927


This thread was automatically locked due to age.
Parents
  • 0

    Hi Azwan,,

    Sorry to hear you are sitll encountering problems.  The 'quarantine, drop files, and continue' action is designed to leave the body intact.   The user should receive the banner & the body of the message.

    We use this action in our 'SophosLabs suspect attachments' rule and it works well. 

    However, if you are actually quarantining all file types the Email Appliance could have viewed the message body as a restricted attachment and remove it (depending on the format of the message)

    Can you describe how your rule is setup?  Rather than quarantine all attachments I'd recommend to exclude certain types of attachments (such as .txt) to prevent unwanted parts of the message being removed.

    If you can call our support team to provide more info they can raise a bug if this is not working as expected.

    Thanks,
    Tom.

    :19243
Reply
  • 0

    Hi Azwan,,

    Sorry to hear you are sitll encountering problems.  The 'quarantine, drop files, and continue' action is designed to leave the body intact.   The user should receive the banner & the body of the message.

    We use this action in our 'SophosLabs suspect attachments' rule and it works well. 

    However, if you are actually quarantining all file types the Email Appliance could have viewed the message body as a restricted attachment and remove it (depending on the format of the message)

    Can you describe how your rule is setup?  Rather than quarantine all attachments I'd recommend to exclude certain types of attachments (such as .txt) to prevent unwanted parts of the message being removed.

    If you can call our support team to provide more info they can raise a bug if this is not working as expected.

    Thanks,
    Tom.

    :19243
Children
No Data
Unfiltered HTML