Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 2 subscribers
  • Views 3787 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mail report - Blocked attachments

InformaticaOostkamp
Is it in any way possible to get a list of all mails that were blocked because of the attachment?
We block all incoming zip files to help prevent cryptoware infections, but every now and then we receive mails with zip attachment that are actually legit. So now we try to check the mail manager everyday to see if anything was blocked that shouldn't be and release if necessary. So it would be great to schedule a daily automatically e-mailed report, but I think it's just not possible?


This thread was automatically locked due to age.
Parents
  • 0
    When I've rolled out Email Protection for a customer, I've had them precede that with an email explaining what to do with the Quarantine report.  If the users want to look at the spams, that's their problem, and they soon should tire of downloading and deleting.

    If there are concerns about the level of care that folks might take in regard to improper downloads, limit 'Release Options' to 'Spam' and 'Expression'.  That way, if there are any other items they would like released from quarantine, they will alert you.  That's less effort for you than checking every item blocked for 'Malware', 'File Extension', 'Unscannable' or 'MIME-Type'.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    When I've rolled out Email Protection for a customer, I've had them precede that with an email explaining what to do with the Quarantine report.  If the users want to look at the spams, that's their problem, and they soon should tire of downloading and deleting.

    If there are concerns about the level of care that folks might take in regard to improper downloads, limit 'Release Options' to 'Spam' and 'Expression'.  That way, if there are any other items they would like released from quarantine, they will alert you.  That's less effort for you than checking every item blocked for 'Malware', 'File Extension', 'Unscannable' or 'MIME-Type'.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?