Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 13 subscribers
  • Views 1595 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

block an excel file that contains a certain name

MahmoudMohsen

I host my company's mail server via the cloud using Sophos Mail Security


I want to block an excel file containing a certain name from sending via email


How can I do this
I like your suggestion



This thread was automatically locked due to age.
Parents
  • 0

    As long as the excel file is not encrypted or password protected, Sophos Central Email Gateway should recognize a name as a keyword. You could even use a regular expression, to catch other spellings. Make sure to activate Subject, body, and attachments (content & name) in your outbound DLP rule.

    “First things first, but not necessarily in that order” – Doctor Who

Reply
  • 0

    As long as the excel file is not encrypted or password protected, Sophos Central Email Gateway should recognize a name as a keyword. You could even use a regular expression, to catch other spellings. Make sure to activate Subject, body, and attachments (content & name) in your outbound DLP rule.

    “First things first, but not necessarily in that order” – Doctor Who

Children
  • 0 in reply to j0hnV

    I can confirm this simply works. Outbound mails that have an excel attachment containing the string MahmoudMohsen are quarantained in my test environment. This would of course happen to all outbound mails containing that name in either subject, body or attachment, if the policy applies. Can also work for inbound mails.

    “First things first, but not necessarily in that order” – Doctor Who

  • 0 in reply to j0hnV

    If your intention is to just block attachments containing a name instead of all mails, I recommend to take a look at CIXA and its DLP capabilities, which can take care of that.

    “First things first, but not necessarily in that order” – Doctor Who

Unfiltered HTML