Password protected attachments not stripped

scottgo_ironport · ‎03-20-2009

Greetings,

I have setup a rule in our IronPort C360 that is supposed to block "protected attachments" - encrypted and password protected files. I have a content filter setup with the condition under Attachment Protection of "One or more attachments are protected." The action applied to this filter is "Strip Attachment by Content" where the attachment contains .*

This is working on encrypted attachments, but password protected attachments are not being stripped.

Is there some way to make both work?

Thanks,

-so

staylor_ironport · ‎03-26-2009

Hi There,
What type of files are you checking this with, also are the attachments password protected to open or to modify.

scottgo_ironport · ‎04-16-2009

Thanks for the reply, Staylor.

It turned out the action needed to be changed. Because the files were password protected on read the scanner could not see the contents.

Changing the action to 'Strip Attachment by File Info' and setting the condition to 'File size is greater than: 1 byte' caused the protected file to be stripped.