03-08-2017 06:11 AM
Hi all,
I have install a ESA 100v on a customer and i'm trying to block URL in attcah files, is this possible ?
ex. i receive a pdf/word file with a url that is malicius, is possible for the esa to look the url in the pdf and block the attchament ?
Thanks
Patricio
Solved! Go to Solution.
03-08-2017 07:44 AM
Hi Patricio,
The URL filtering feature currently does not scan inside attachments as mentioned in the below article.
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote-esa-00.html
The below feature request has been filed to implement this in the future,
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuy14402/?reffering_site=dumpcr
If the attachment is malicious the ESA should be able to detect that using its other features such as Sophos, McAfee, AMP, Outbreak Filtering, etc.
Thank You!
Libin Varghese
03-08-2017 07:44 AM
Hi Patricio,
The URL filtering feature currently does not scan inside attachments as mentioned in the below article.
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote-esa-00.html
The below feature request has been filed to implement this in the future,
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuy14402/?reffering_site=dumpcr
If the attachment is malicious the ESA should be able to detect that using its other features such as Sophos, McAfee, AMP, Outbreak Filtering, etc.
Thank You!
Libin Varghese
03-09-2017 01:08 AM
Hi all,
Thanks for the replay, do you know when will be available the feature ?
Regards,
Patcr600
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide