Blocking .exe files in .7z archives

[irkutskoil]

Hi

How can i block .exe files in .7z archives omn Cisco ESA?

I have an incoming content filter to block different files in emails

it looks like attachment-filename == "(?i)\\.(tar|gz|exe|lnk|js|dll|msi|scr|jar|hta)$"

It works for zip archives but for 7z it doesn't

[Libin Varghese · Accepted solution]

Hi,

We do not currently have visibility into .7z files. The engine is not able to look into inside this file type to see the executable file.

There's already a feature request for supporting the 7z files scanning for the IronPort with Feature request number:

https://tools.cisco.com/bugsearch/bug/CSCzv63760/?reffering_site=dumpcr

Currently the Feature has no work-around for the (7z) files, but the only way that you can block them is by using a filter that blocks the (7z) based on the file-info (file name ends with 7z).

Regards
Libin Varghese