cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
833
Views
5
Helpful
1
Replies
Highlighted
Beginner

Blocking .exe files in .7z archives

Hi

How can i block .exe files in .7z archives omn Cisco ESA?

I have an incoming content filter to block different files in emails

it looks like attachment-filename == "(?i)\\.(tar|gz|exe|lnk|js|dll|msi|scr|jar|hta)$"

It works for zip archives but for 7z it doesn't

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Hi,

We do not currently have visibility into .7z files. The engine is not able to look into inside this file type to see the executable file.

There's already a feature request for supporting the 7z files scanning for the IronPort with Feature request number:


https://tools.cisco.com/bugsearch/bug/CSCzv63760/?reffering_site=dumpcr

Currently the Feature has no work-around for the (7z) files, but the only way that you can block them is by using a filter that blocks the (7z) based on the file-info (file name ends with 7z).

Regards
Libin Varghese

View solution in original post

1 REPLY 1
Highlighted
Cisco Employee

Hi,

We do not currently have visibility into .7z files. The engine is not able to look into inside this file type to see the executable file.

There's already a feature request for supporting the 7z files scanning for the IronPort with Feature request number:


https://tools.cisco.com/bugsearch/bug/CSCzv63760/?reffering_site=dumpcr

Currently the Feature has no work-around for the (7z) files, but the only way that you can block them is by using a filter that blocks the (7z) based on the file-info (file name ends with 7z).

Regards
Libin Varghese

View solution in original post