Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Email Security Quick-links: ESA Product Support | SMA Product Support | Email Submission and Tracking Portal | Cisco SecurityHub
Current General Deployment (GD) Releases:
ESA: 11.0.0-264 WSA: 10.5.1-296 SMA: 11.0.0-115 Email Plug-in (Reporting): 1.0.1-048 Email Plug-in (Encryption): 1.0.0-036

New Member

Office 2007/2010 Attachment recognition in 7.5

Since upgrading we are finding problems with Ironport detecting .bin files in docx, xlsx etc. I know that these files are technically zip files and when an Excel spreadsheet has a macro it will carry a .bin file etc. The problem is that this was "fixed" in around 2008 when MS first introduced these attachment types. Why does 7.5 re-introduce this problem?

10 REPLIES
New Member

Office 2007/2010 Attachment recognition in 7.5

Daryl,

I'm running into the same problem after the upgrade.  Have you found any solution to the problem?  It is causing us a major "headache".

Doug

New Member

Office 2007/2010 Attachment recognition in 7.5

Doug,

The response I got was that this is a "feature" of 7.5.

One possibility to bypass office documents is the a message filter condition

like following:

if (attachment-filename !=

"(?i)\.(docx|docm|dotx|dotm|xlsx|xlsm|xltm|xlsb|xlam|pptx|pptm|potx|potm|ppa

m|ppsx|ppsm")

Another possibility is to use a content filter condition

Attachment Name Does not End With

(?i)\.(docx|docm|dotx|dotm|xlsx|xlsm|xltm|xlsb|xlam|pptx|pptm|potx|potm|ppam

|ppsx|ppsm)

Unfortunately there is no other way to bypass Office documents with macros

as long as you have a filter for executable files.

New Member

Office 2007/2010 Attachment recognition in 7.5

Daryl,

Thanks for the update.

That's what I was afraid of. 

Doug

New Member

Office 2007/2010 Attachment recognition in 7.5

Daryl,

I opened a ticket with TAC.  This has been flagged as a bug:

The behavior you are reporting is tracked in our bug database as defect 81190

It will be fixed in a coming MR.

New Member

Office 2007/2010 Attachment recognition in 7.5

Thanks Doug for the info. It was the TAC that told me this was a feature that wouldn't be fixed !!!

New Member

Office 2007/2010 Attachment recognition in 7.5

Daryl,

If you can get access to the AsyncOS 7.6.0 for Email FCS, the Office attachment problem is fixed.  We deployed it last night and have not had any issues.

Doug

New Member

Office 2007/2010 Attachment recognition in 7.5

We are also experiencing this issue with 7.5.1 and Office files.

Doug Maxfield, I did not see this fix listed on the 7.6.0 FCS announcement, can you confirm that the 7.6.0 release does correct this bug?

Thanks

David

New Member

Office 2007/2010 Attachment recognition in 7.5

David,

I asked the same questions when 7.6 FCS was released.  The response that I received back was that not all "bug" that are fixed are included in the Readme.

I can confirm 100% that the issue is resolved.

Doug

New Member

Re: Office 2007/2010 Attachment recognition in 7.5

Thanks

Thanks,

David Owens

New Member

Office 2007/2010 Attachment recognition in 7.5

David,

Here's the bug number for the Office Attachment problem:  defect 81190

Doug

1824
Views
0
Helpful
10
Replies