Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 13 replies
  • Subscribers 2 subscribers
  • Views 8218 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Zip files

James Shakour
We are getting some spam emails that are making their through the ASG to the ends users pc's that contain zip files. The users, not knowing any better (b/c the email come from "delta or USPS") open the zip file, only for it to contain a virus. IS there a way to combat this?


This thread was automatically locked due to age.
Parents
  • 0
    I second this!
    If there were at least a way to block *.exe and *com in a zip file. 
    In fact, I suggest that any of the blocked file extensions should really trigger just as well when found inside a*zip or other archive file. Anybody wanting to use zipping in order to circumwent extension checks should at least use encrpyted archives

    cu
    Hagen
  • 0 in reply to hagman_01
    I second this!
    If there were at least a way to block *.exe and *com in a zip file. 
    In fact, I suggest that any of the blocked file extensions should really trigger just as well when found inside a*zip or other archive file. Anybody wanting to use zipping in order to circumwent extension checks should at least use encrpyted archives

    cu
    Hagen


    encrypted archives should be blocked at the gateway....if they can't be scanned then use another solution like secure portals..not e-mail.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Reply
  • 0 in reply to hagman_01
    I second this!
    If there were at least a way to block *.exe and *com in a zip file. 
    In fact, I suggest that any of the blocked file extensions should really trigger just as well when found inside a*zip or other archive file. Anybody wanting to use zipping in order to circumwent extension checks should at least use encrpyted archives

    cu
    Hagen


    encrypted archives should be blocked at the gateway....if they can't be scanned then use another solution like secure portals..not e-mail.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Children
No Data
Cookie Information Banner