Change IronPort attachment handling behavior

[abillings2]

Is there a way to configure an IronPort 170 to automatically block any e-mail attachment which cannot be successfully scanned?  For example, users are able to send password protected zip files though e-mail, and the IronPort’s default behavior seems to be to pass the files though, though they cannot be opened and scanned.

[Ken Stieers]

Mail Policies/Incoming Mail Policies

If you click on the AV stuff, it will take you to a page where you can change that...

Change the "Applied action" to what you want...