cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1379
Views
0
Helpful
2
Replies

MP3 files are inside a zip file the ESA is not blocking it.

Asim Afzal
Level 1
Level 1

Issue :  We have configured an incoming content filter to block MP3 files in the ESA. The issue is that when the MP3 files are inside a zip file the ESA is not blocking it.

Zip file contain exe is works fine as per below config but if zip file contain mp3. ESA not blocking it

CLI > filters > new

Paste the filter syntax and commit changes

However if you wish to use the content filter via the GUI.

GUI > Mail Policies > Incoming Content Filters

Create a new content filter

Condition -> Attachment filetype is -> Executable (From the drop down)

Condition 2 -> Attachment Filename contains -> (?i)\.(exe|scr)$

Action:

Strip attachment by file info -> By either filename contains (?i)\.(exe|scr)

Strip attachment by File info -> Filetype is executable

(You can customize this to your own preferences)

Submit this filter.

GUI > Mail Policies > Incoming Mail Policies

Deploy this content filter on to the policies

Submit and commit changes,

Regards,

Matthew

Regards,

Matthew

1 Accepted Solution

Accepted Solutions

Libin Varghese
Cisco Employee
Cisco Employee

Hi Asim,

You would need to update the existing filter and add the extension "mp3" in order to catch that as well.

Condition 2 -> Attachment Filename contains -> (?i)\.(exe|scr|mp3)$

The attachment filename condition would look inside a zip as well for the mentioned filenames.

You can keep adding extensions as per your requirement.

Regards,

Libin Varghese

View solution in original post

2 Replies 2

Libin Varghese
Cisco Employee
Cisco Employee

Hi Asim,

You would need to update the existing filter and add the extension "mp3" in order to catch that as well.

Condition 2 -> Attachment Filename contains -> (?i)\.(exe|scr|mp3)$

The attachment filename condition would look inside a zip as well for the mentioned filenames.

You can keep adding extensions as per your requirement.

Regards,

Libin Varghese

Hello Asim,

We have a long-open bug regarding the attachment file-type is (mp3) content filter and it not working properly. As Libin suggested, you'll want to edit your filename ends with condition and add mp3 to your list.

More info on that bug here : Attachment Filetype condition for few MP3 files are not working properly

Thanks!

-Dennis M.