12-14-2016 11:47 PM
Hi
How can i block .exe files in .7z archives omn Cisco ESA?
I have an incoming content filter to block different files in emails
it looks like attachment-filename == "(?i)\\.(tar|gz|exe|lnk|js|dll|msi|scr|jar|hta)$"
It works for zip archives but for 7z it doesn't
Solved! Go to Solution.
12-15-2016 05:32 AM
Hi,
We do not currently have visibility into .7z files. The engine is not able to look into inside this file type to see the executable file.
There's already a feature request for supporting the 7z files scanning for the IronPort with Feature request number:
https://tools.cisco.com/bugsearch/bug/CSCzv63760/?reffering_site=dumpcr
Currently the Feature has no work-around for the (7z) files, but the only way that you can block them is by using a filter that blocks the (7z) based on the file-info (file name ends with 7z).
Regards
Libin Varghese
12-15-2016 05:32 AM
Hi,
We do not currently have visibility into .7z files. The engine is not able to look into inside this file type to see the executable file.
There's already a feature request for supporting the 7z files scanning for the IronPort with Feature request number:
https://tools.cisco.com/bugsearch/bug/CSCzv63760/?reffering_site=dumpcr
Currently the Feature has no work-around for the (7z) files, but the only way that you can block them is by using a filter that blocks the (7z) based on the file-info (file name ends with 7z).
Regards
Libin Varghese
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: