Solved: Inbound filters, drop if can't check

bvj197222 · ‎10-12-2015

The ironport has a number of Security features. Where do we configure what do to if the filter in question (anti-virus, whatever) fail to examine an Attached file? We want the ironport to drop the email if the Attached file is unscannable.

exMSW4319 · ‎10-12-2015

On your Mail Policies, Incoming Mail Policies screen there is a column "Anti-Virus" with one line per policy.

Click on the line of the Anti-Virus column that you want to change. It will then come up with a long list of options if the message is encrypted, unscannable or just infected. One of the actions you can choose for each one of these is Drop Message.

We don't bother wasting CPU repairing viruses here; if it's infected then it's probably random rubbish that is best discarded. Depending on how you feel about your interior network you may want to take some different actions with your Outgoing Mail Policies.

View solution in original post

exMSW4319 · ‎10-12-2015

On your Mail Policies, Incoming Mail Policies screen there is a column "Anti-Virus" with one line per policy.

Click on the line of the Anti-Virus column that you want to change. It will then come up with a long list of options if the message is encrypted, unscannable or just infected. One of the actions you can choose for each one of these is Drop Message.

We don't bother wasting CPU repairing viruses here; if it's infected then it's probably random rubbish that is best discarded. Depending on how you feel about your interior network you may want to take some different actions with your Outgoing Mail Policies.