Attachment Filter

Question

Hi all,

I receive product feature or setting inquiring regarding sophos email appliance.

customer inquiring if sophos email appliance have setting or features like MIME Sweeper Attachment Filtering.

Whereby every email from outbound with attachment will be quarantine and email will be deliver to enduser with banner to contact IT for attachment release.

I have check email appliance setting and the setting can be configured except email that deliver to end user contain only banner and header, Can someone help me or have any information reagrding this setting?. Thanks

This thread was automatically locked due to age.

TomA · Accepted Answer

Hi Azwan,, Sorry to hear you are sitll encountering problems.  The 'quarantine, drop files, and continue' action is designed to leave the body intact.   The user should receive the banner & the body of the message. We use this action in our 'SophosLabs suspect attachments' rule and it works well.  However, if you are actually quarantining all file types the Email Appliance could have viewed the message body as a restricted attachment and remove it (depending on the format of the message) Can you describe how your rule is setup?  Rather than quarantine all attachments I'd recommend to exclude certain types of attachments (such as .txt) to prevent unwanted parts of the message being removed. If you can call our support team to provide more info they can raise a bug if this is not working as expected. Thanks, Tom. :19243