cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1777
Views
0
Helpful
2
Replies

Cisco ESA Block URL's in attcahment files

patcbr600
Beginner
Beginner

Hi all,

I have install a ESA 100v on a customer and i'm trying to block URL in attcah files, is this possible ?

ex. i receive a pdf/word  file with a url that is malicius, is possible for the esa to look the url in the pdf and block the attchament ?

Thanks

Patricio

1 Accepted Solution

Accepted Solutions

Libin Varghese
Cisco Employee
Cisco Employee

Hi Patricio,

The URL filtering feature currently does not scan inside attachments as mentioned in the below article.

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote-esa-00.html

The below feature request has been filed to implement this in the future,

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuy14402/?reffering_site=dumpcr

If the attachment is malicious the ESA should be able to detect that using its other features such as Sophos, McAfee, AMP, Outbreak Filtering, etc.

Thank You!

Libin Varghese

View solution in original post

2 Replies 2

Libin Varghese
Cisco Employee
Cisco Employee

Hi Patricio,

The URL filtering feature currently does not scan inside attachments as mentioned in the below article.

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote-esa-00.html

The below feature request has been filed to implement this in the future,

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuy14402/?reffering_site=dumpcr

If the attachment is malicious the ESA should be able to detect that using its other features such as Sophos, McAfee, AMP, Outbreak Filtering, etc.

Thank You!

Libin Varghese

Hi all,

Thanks for the replay, do you know when will be available the feature ?

Regards,

Patcr600

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers