ESA Does Not Show Email Attachment Information in the Message Tracking

[EUR]

Hi, we are doing some tests to send outgoing emails with a Cisco ESA device, we have a problem with message tracking, attachments are not detected even if they are present in the email. Submissions were done either via batch or with Mozilla Thunderbird.
Is there a particular reason for this behavior?

[Ken Stieers · Accepted solution]

If you want everything logged, vs things it might ignore (eg files none of the security engines will look at), add the following message filter in the cli.


File_Monitor:
if (attachment-filename == "^.+$")
{
log-entry("MF: $filenames $filetypes")



That will add a log entry to all mail, inbound and outbound.

[EUR]

It works thanks!!!