cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1436
Views
0
Helpful
2
Replies

Can I alter smart identifier (ABA Routing Number)

keithsauer507
Level 5
Level 5

I would like to know if I can alter the smart identifier ABA Routing Number in the C160 e-mail appliance to exclude the number "278882584".

Quite a few e-mails are unintentially getting encrypted (going out) or quarentined (coming in) because of this number being attached to specific Microsoft Outlook style sheets.

At a glance this number is triggering a quarentine message.  When you look at the message you can't find it anywhere.  It's only when you view the source of the message you find the culpret in the message body like this:

@list l1

{mso-list-id:278882584;

mso-list-template-ids:790643676;}

This is in the top of the email within the style tag.

Can this number be excluded?

2 Replies 2

Andreas Mueller
Level 4
Level 4

Hello Keith,

smart identifiers cannot be modified, the only way to probably prevent these false positives would be to exclude metadata from scaning:

CLI: scanconfig->SETUP->Do you want to scan attachment metadata? [Y]> N

Not sure if that will help, but it's certainly worth a try.

Regards,

Andreas

Bob Fayne
Level 1
Level 1

I'm with Andreas that spreadsheet files will often have any number of 9-digit numbers that can trigger false positives.

You could add a content filter before the one that checks for the Smart Identifier that will skip other rules.

Condition: Attachment Content contains text 278882584

Action: Skip remaining content filters (delivernow)

All of the remaining rules will get skipped. Be aware that you may burn up some cpu cycles doing that since it is a 'dumb' string check