This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

does Sophos search .png files in email?

My users are complaining that our email filter currently blocks .png file attachments. In reading on the web, png files are well known to host payloads. before I turn it on at the filter, I need to know we are safe.

I can't find any documentation on the sophos site that says it checks .png file attachments (i.e. someones signature) inside of email. I am assuming it does but I have never seen a sophos message relating to an email so I don't really know.

Our system:

Sophos Enterprise AntiVirus 10.0

Exchange 2007 server

Office 2010 outlook client

:48526


This thread was automatically locked due to age.
Parents
  • Hello Mark,

    the Sophos Endpoint product does not decode most containers (like email messages). As the applications decode and write the contents to local storage before displaying them or passing them to another application or the OS the content will be scanned by on-access (if you have scan on write enabled even before it is accessed for reading). Consequently if preview is off and an attachment isn't explicitly opened it will never get scanned - but then it also can't do no harm.

    HTH
    Christian

    :48542
Reply
  • Hello Mark,

    the Sophos Endpoint product does not decode most containers (like email messages). As the applications decode and write the contents to local storage before displaying them or passing them to another application or the OS the content will be scanned by on-access (if you have scan on write enabled even before it is accessed for reading). Consequently if preview is off and an attachment isn't explicitly opened it will never get scanned - but then it also can't do no harm.

    HTH
    Christian

    :48542
Children
No Data