Cisco ESA Block URL's in attcahment files

[patcbr600]

Hi all,

I have install a ESA 100v on a customer and i'm trying to block URL in attcah files, is this possible ?

ex. i receive a pdf/word  file with a url that is malicius, is possible for the esa to look the url in the pdf and block the attchament ?

Thanks

Patricio

[Libin Varghese · Accepted solution]

Hi Patricio,

The URL filtering feature currently does not scan inside attachments as mentioned in the below article.

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote-esa-00.html

The below feature request has been filed to implement this in the future,

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuy14402/?reffering_site=dumpcr

If the attachment is malicious the ESA should be able to detect that using its other features such as Sophos, McAfee, AMP, Outbreak Filtering, etc.

Thank You!

Libin Varghese

[patcbr600]

Hi all,

Thanks for the replay, do you know when will be available the feature ?

Regards,

Patcr600