Retrieve attachment stripped / repaired by AV engine

[SHABEEB KUNHIPOCKER]

Hello,

Is it possible to retrieve attachment stripped or repaired by the AV engine of ESA?. The ESA version is 10.x. 

Thanks

[Libin Varghese · Accepted solution]

Not unless you have Sophos set to Archive Original Message.

If the email is archived, you should be able to retrieve the email in mbox format.

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/212705-how-to-extract-an-email-from-archive-mbo.html

Regards,

Libin Varghese

[slicciardola]

Hi,

ho to set sophos with this option?

[slicciardola]

ok, into all av options i have the "archive" enabled.

Now i am into avarchive is it right?