Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Prohibit Intercept X Advanced users to download .exe, .scr files

For users, id like to prohibit incoming file data via all applications (outlook,web browser etc.) .exe, .scr or malware injected data files like pdf, jpg, mp3 (stenography) etc. from internet.

Can sophos identify and manage it?
What kind of policy to do it?



This thread was automatically locked due to age.
Parents
  • Hey Can carmack,

    Not sure if you're asking if you block the inbound files by type from entering your network of if you're asking if Intercept will block files that contain mailware.  So, I'll answer both...

    Files containing malware - Intercept X won't stop the files from coming into your environment, but when the files are accessed they will be scanned and if containing malware will be blocked/quarantined and cleaned. Intercept has to see the files before it can scan them :)

    Blocking file downloads/attachments etc - yes and no - you could configure Web Control to block downloads, but that will only apply to files that are downloaded from within a browser. 

    You could use a DLP policy to block by file type, but that would also block files being attached to Outlook for internal mail too.

    If you want to only block data from being downloaded over the internet regardless of application, you would need to leverage other technologies such as  firewalls and email gateways.

    Joe

Reply
  • Hey Can carmack,

    Not sure if you're asking if you block the inbound files by type from entering your network of if you're asking if Intercept will block files that contain mailware.  So, I'll answer both...

    Files containing malware - Intercept X won't stop the files from coming into your environment, but when the files are accessed they will be scanned and if containing malware will be blocked/quarantined and cleaned. Intercept has to see the files before it can scan them :)

    Blocking file downloads/attachments etc - yes and no - you could configure Web Control to block downloads, but that will only apply to files that are downloaded from within a browser. 

    You could use a DLP policy to block by file type, but that would also block files being attached to Outlook for internal mail too.

    If you want to only block data from being downloaded over the internet regardless of application, you would need to leverage other technologies such as  firewalls and email gateways.

    Joe

Children
No Data