Views:
 
Attachment Blocking skips a mail which is quarantined and detected as spam by the Anti-Spam feature of WFBS or SMEX.
For SMEX, you may enable the Attachment Blocking filter to prevent skipping the detected spam mails.
For WFBS 8.0, you need to request a hotfix first from Trend Micro Technical Support before enabling the Attachment Blocking filter.
 

Attachment Blocking is designed to pass unscannable or encrypted file attachments. The procedure below will only block EXE file in a ZIP or compressed file. You may refer to another article on how to block EXE file in an encrypted or password-protected ZIP file.

To block EXE file in a ZIP file, follow the procedure for your product below:

  1. Log in to WFBS Web Management console.
  2. Go to Security Settings > Select your Exchange Server > Configure.
  3. Under MSA Configuration, select Attachment Blocking.
  4. Tick the Enable real-time attachment blocking check box.
  5. Under Target tab, select Specific attachments.
  6. Select Attachment Types > Applications and executables > Executables (.exe; dll; .vxd).
  7. Tick the Block attachment types or names within ZIP files check box.

    Block attachment types within ZIP in WFBS

  8. Go to Action tab and select your preferred action from the following:
    • Replace attachment with text/file
    • Quarantine entire message
    • Quarantine message part
    • Delete entire message

    Select an action for Attachment Blocking in WFBS

  9. Click Save.

  1. Log in to SMEX Management console.
  2. Go to Attachment Blocking > Global Policy > Target tab.

    Attachment blocking

  3. Select and expand Specific attachments.
  4. Select Attachment types > Applications and executable files > Executable (.exe; dll; .vxd).
  5. Tick the Block attachment types or names within compressed files check box.

    Configure Blocking Targets

  6. Go to Action tab and select your preferred action from the following:
    • Replace attachment with text/file
    • Quarantine entire message
    • Quarantine message part
    • Delete entire message

    Configure Action Settings

  7. Click Save. The screen returns to the Attachment Blocking main page.
  8. On the Attachment Blocking main page, tick the Enable attachment blocking check box.
     
    For SMEX with both Hub Transport and Mailbox Role, it is recommended to select the two (2) Enable attachment blocking check boxes. For SMEX with Mailbox Role only or with Hub Transport Role only, there will be only one (1) Enable attachment blocking check box for each server. We still recommend to select the Enable attachment blocking check box on both servers.
     

    Enable attachment blocking

     
    For SMEX 12.0 or SMEX installed on Exchange 2013, due to design changes in Microsoft Exchange, there is only one (1) Enable attachment blocking check box for each server. It is still recommended to enable this option.
     

    ”SMEX12”

  9. Click Save.
Keywords: scan exe file in compressed file,scan .exe attachments,activate attachment blocking,attachment policie,attachment policies,attachment blocking